[ubuntu/hardy-security] openldap2.3_2.4.9-0ubuntu0.8.04.5_i386_translations.tar.gz, openldap2.3_2.4.9-0ubuntu0.8.04.5_sparc_translations.tar.gz (delayed), openldap2.3_2.4.9-0ubuntu0.8.04.5_lpia_translations.tar.gz, openldap2.3_2.4.9-0ubuntu0.8.04.5_hppa_translations.tar.gz, openldap2.3, openldap2.3_2.4.9-0ubuntu0.8.04.5_amd64_translations.tar.gz, openldap2.3_2.4.9-0ubuntu0.8.04.5_powerpc_translations.tar.gz, openldap2.3_2.4.9-0ubuntu0.8.04.5_ia64_translations.tar.gz 2.4.9-0ubuntu0.8.04.5 (Accepted)

[Ubuntu Installer]

openldap2.3 (2.4.9-0ubuntu0.8.04.5) hardy-security; urgency=low

  * SECURITY UPDATE: fix successful anonymous bind via chain overlay when
    using forwarded authentication failures
    - debian/patches/CVE-2011-1024
    - CVE-2011-1024
  * SECURITY UPDATE: fix DoS when processing unauthenticated modrdn requests
    and requestDN is empty
    - debian/patches/CVE-2011-1081
    - CVE-2011-1081

Date: Wed, 16 Mar 2011 10:22:57 -0500
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/hardy/+source/openldap2.3/2.4.9-0ubuntu0.8.04.5
-------------- next part --------------
Format: 1.7
Date: Wed, 16 Mar 2011 10:22:57 -0500
Source: openldap2.3
Binary: slapd ldap-utils libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev slapd-dbg
Architecture: source
Version: 2.4.9-0ubuntu0.8.04.5
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 ldap-utils - OpenLDAP utilities
 libldap-2.4-2 - OpenLDAP libraries
 libldap-2.4-2-dbg - Debugging information for OpenLDAP libraries
 libldap2-dev - OpenLDAP development libraries
 slapd      - OpenLDAP server (slapd)
 slapd-dbg  - Debugging information for the OpenLDAP server (slapd)
Changes: 
 openldap2.3 (2.4.9-0ubuntu0.8.04.5) hardy-security; urgency=low
 .
   * SECURITY UPDATE: fix successful anonymous bind via chain overlay when
     using forwarded authentication failures
     - debian/patches/CVE-2011-1024
     - CVE-2011-1024
   * SECURITY UPDATE: fix DoS when processing unauthenticated modrdn requests
     and requestDN is empty
     - debian/patches/CVE-2011-1081
     - CVE-2011-1081
Files: 
 dd83da7cf313c8ffefa7e1713a8e60a0 2153 net optional openldap2.3_2.4.9-0ubuntu0.8.04.5.dsc
 0a17a6a7242dc27e5590f869698d91bf 148348 net optional openldap2.3_2.4.9-0ubuntu0.8.04.5.diff.gz
Original-Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel at lists.alioth.debian.org>