[horde] PAM authentication missing PAM?

[Ole Wolf]

On Mon, 2011-06-13 at 21:12 +0200, Jan Schneider wrote:

> >> Yes, the fact that pam_auth is unmaintained and has been deprecated  
> >> years ago.
> >>
> >
> >
> > If that's the case, maybe I had better make a ticked on this to the
> > Ubuntu team. Do you happen to have a link to a formal statement that it
> > is obsoleted?
> 
> Upstream reference lead to nowhere:  
> http://packages.debian.org/changelogs/pool/main/p/php-auth-pam/php-auth-pam_0.4-10/copyright
> 
> The Debian package manager is the only one still working on this extension.


I've filed a bug report to Ubuntu, stating that the use of an
unmaintained package for security checks is an inherent security
vulnerability.

-- 
Ole Wolf
Rødhættevej 4   9400 Nørresundby
Telefon: 9632-0108   Mobil: 2467-5526   Skype: ole.wolf