ANN: Community LDAP modules security update (CVE-2020-8086)

[Matthew Wild]

Hi folks,

This is a notification of a security issue that we discovered and just
published a fix for in the prosody-modules repository.

There are two affected community modules: mod_auth_ldap and mod_auth_ldap2.

If you do not use these modules, you are not affected. Neither of
these modules are distributed with Prosody, and you do not need to
upgrade Prosody itself to resolve this issue.

If you do use either of these modules, we recommend that you upgrade
to the latest revision of prosody-modules immediately.

For more information, please see the full security advisory at
https://prosody.im/security/advisory_20200128/

--
The Prosody Team