[ubuntu/hirsute-proposed] openldap 2.4.53+dfsg-1ubuntu4 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Mon Nov 9 20:26:13 UTC 2020


openldap (2.4.53+dfsg-1ubuntu4) hirsute; urgency=medium

  * SECURITY UPDATE: DoS via NULL pointer dereference
    - debian/patches/CVE-2020-25692.patch: skip normalization if there's no
      equality rule in servers/slapd/modrdn.c.
    - CVE-2020-25692

Date: Mon, 09 Nov 2020 14:02:02 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/openldap/2.4.53+dfsg-1ubuntu4
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 09 Nov 2020 14:02:02 -0500
Source: openldap
Architecture: source
Version: 2.4.53+dfsg-1ubuntu4
Distribution: hirsute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 openldap (2.4.53+dfsg-1ubuntu4) hirsute; urgency=medium
 .
   * SECURITY UPDATE: DoS via NULL pointer dereference
     - debian/patches/CVE-2020-25692.patch: skip normalization if there's no
       equality rule in servers/slapd/modrdn.c.
     - CVE-2020-25692
Checksums-Sha1:
 142bc8292d69ea6b843fad73b28d2192ac16af5e 3154 openldap_2.4.53+dfsg-1ubuntu4.dsc
 a8eeaa678bc965a2f54216a99ddc36ef8c1183e1 182120 openldap_2.4.53+dfsg-1ubuntu4.debian.tar.xz
 127bccdd2b7fb254af19ececf9e34f8b56e8a01b 8045 openldap_2.4.53+dfsg-1ubuntu4_source.buildinfo
Checksums-Sha256:
 645e850d46791ee63183a90037574b32829dcb6bdd561a3959e50b64171f2a7d 3154 openldap_2.4.53+dfsg-1ubuntu4.dsc
 05dcdb0cdd624e3b9af8b473ba19d44c983fad933347534806292fb7b2381c6a 182120 openldap_2.4.53+dfsg-1ubuntu4.debian.tar.xz
 c41d091a3e1b4a9ddc1959f79a0f34fe32aa1a7479cc8a700c84802c4e84fe23 8045 openldap_2.4.53+dfsg-1ubuntu4_source.buildinfo
Files:
 621b790e0244062d574a896c2658e886 3154 net optional openldap_2.4.53+dfsg-1ubuntu4.dsc
 cf80a32d3f87ca9c053e58f358b385e7 182120 net optional openldap_2.4.53+dfsg-1ubuntu4.debian.tar.xz
 ebf373b3362a71d86287450fda9d2e4f 8045 net optional openldap_2.4.53+dfsg-1ubuntu4_source.buildinfo
Original-Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
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=Jcsx
-----END PGP SIGNATURE-----


More information about the Hirsute-changes mailing list