[ubuntu/lucid-security] openldap_2.4.21-0ubuntu5.4_powerpc_translations.tar.gz, openldap_2.4.21-0ubuntu5.4_amd64_translations.tar.gz, openldap_2.4.21-0ubuntu5.4_sparc_translations.tar.gz (delayed), openldap_2.4.21-0ubuntu5.4_ia64_translations.tar.gz, openldap, openldap_2.4.21-0ubuntu5.4_armel_translations.tar.gz, openldap_2.4.21-0ubuntu5.4_i386_translations.tar.gz 2.4.21-0ubuntu5.4 (Accepted)

[Ubuntu Installer]

openldap (2.4.21-0ubuntu5.4) lucid-security; urgency=low

  * SECURITY UPDATE: fix successful anonymous bind via chain overlay when
    using forwarded authentication failures
    - debian/patches/CVE-2011-1024
    - CVE-2011-1024
  * SECURITY UPDATE: verify password when authenticating to rootdn and using ndb
    backend. Note: Ubuntu is not compiled with --enable-ndb by default
    - debian/patches/CVE-2011-1025
    - CVE-2011-1025
  * SECURITY UPDATE: fix DoS when processing unauthenticated modrdn requests
    and requestDN is empty
    - debian/patches/CVE-2011-1081
    - CVE-2011-1081

Date: Wed, 16 Mar 2011 10:15:30 -0500
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/openldap/2.4.21-0ubuntu5.4
-------------- next part --------------
Format: 1.8
Date: Wed, 16 Mar 2011 10:15:30 -0500
Source: openldap
Binary: slapd ldap-utils libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev slapd-dbg
Architecture: source
Version: 2.4.21-0ubuntu5.4
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 ldap-utils - OpenLDAP utilities
 libldap-2.4-2 - OpenLDAP libraries
 libldap-2.4-2-dbg - Debugging information for OpenLDAP libraries
 libldap2-dev - OpenLDAP development libraries
 slapd      - OpenLDAP server (slapd)
 slapd-dbg  - Debugging information for the OpenLDAP server (slapd)
Changes: 
 openldap (2.4.21-0ubuntu5.4) lucid-security; urgency=low
 .
   * SECURITY UPDATE: fix successful anonymous bind via chain overlay when
     using forwarded authentication failures
     - debian/patches/CVE-2011-1024
     - CVE-2011-1024
   * SECURITY UPDATE: verify password when authenticating to rootdn and using ndb
     backend. Note: Ubuntu is not compiled with --enable-ndb by default
     - debian/patches/CVE-2011-1025
     - CVE-2011-1025
   * SECURITY UPDATE: fix DoS when processing unauthenticated modrdn requests
     and requestDN is empty
     - debian/patches/CVE-2011-1081
     - CVE-2011-1081
Checksums-Sha1: 
 efebc4250ebb609f5abb2dfcaf20b2574d691f0a 2604 openldap_2.4.21-0ubuntu5.4.dsc
 9074a56edf63e5dd1a775451291967719d6efdf2 153875 openldap_2.4.21-0ubuntu5.4.diff.gz
Checksums-Sha256: 
 582ab80623c12e2a740b8efde84848796e39917cfd41fb89ceee13c7214fabaf 2604 openldap_2.4.21-0ubuntu5.4.dsc
 123147004720aba35f9cbc78f4935a79d8b2da7d6cc3cf49f37f5ea941af0920 153875 openldap_2.4.21-0ubuntu5.4.diff.gz
Files: 
 aa8c045f1e85f4dbfa69de84707f29eb 2604 net optional openldap_2.4.21-0ubuntu5.4.dsc
 3597ced7de4989ba2b7d79dc9be4eab3 153875 net optional openldap_2.4.21-0ubuntu5.4.diff.gz
Original-Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel at lists.alioth.debian.org>