[ubuntu/maverick-security] openldap_2.4.23-0ubuntu3.5_i386_translations.tar.gz, openldap_2.4.23-0ubuntu3.5_amd64_translations.tar.gz, openldap, openldap_2.4.23-0ubuntu3.5_armel_translations.tar.gz, openldap_2.4.23-0ubuntu3.5_powerpc_translations.tar.gz (delayed) 2.4.23-0ubuntu3.5 (Accepted)

[Ubuntu Installer]

openldap (2.4.23-0ubuntu3.5) maverick-security; urgency=low

  * SECURITY UPDATE: fix successful anonymous bind via chain overlay when
    using forwarded authentication failures
    - debian/patches/CVE-2011-1024
    - CVE-2011-1024
  * SECURITY UPDATE: verify password when authenticating to rootdn and using ndb
    backend. Note: Ubuntu is not compiled with --enable-ndb by default
    - debian/patches/CVE-2011-1025
    - CVE-2011-1025
  * SECURITY UPDATE: fix DoS when processing unauthenticated modrdn requests
    and requestDN is empty
    - debian/patches/CVE-2011-1081
    - CVE-2011-1081

Date: Wed, 16 Mar 2011 09:48:17 -0500
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/maverick/+source/openldap/2.4.23-0ubuntu3.5
-------------- next part --------------
Format: 1.8
Date: Wed, 16 Mar 2011 09:48:17 -0500
Source: openldap
Binary: slapd ldap-utils libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev slapd-dbg
Architecture: source
Version: 2.4.23-0ubuntu3.5
Distribution: maverick-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 ldap-utils - OpenLDAP utilities
 libldap-2.4-2 - OpenLDAP libraries
 libldap-2.4-2-dbg - Debugging information for OpenLDAP libraries
 libldap2-dev - OpenLDAP development libraries
 slapd      - OpenLDAP server (slapd)
 slapd-dbg  - Debugging information for the OpenLDAP server (slapd)
Changes: 
 openldap (2.4.23-0ubuntu3.5) maverick-security; urgency=low
 .
   * SECURITY UPDATE: fix successful anonymous bind via chain overlay when
     using forwarded authentication failures
     - debian/patches/CVE-2011-1024
     - CVE-2011-1024
   * SECURITY UPDATE: verify password when authenticating to rootdn and using ndb
     backend. Note: Ubuntu is not compiled with --enable-ndb by default
     - debian/patches/CVE-2011-1025
     - CVE-2011-1025
   * SECURITY UPDATE: fix DoS when processing unauthenticated modrdn requests
     and requestDN is empty
     - debian/patches/CVE-2011-1081
     - CVE-2011-1081
Checksums-Sha1: 
 51c4171fbbcc739c0dde4b028bf208c9e516f819 2628 openldap_2.4.23-0ubuntu3.5.dsc
 a465a3742d20357ca674af318db082ab01296e86 158394 openldap_2.4.23-0ubuntu3.5.diff.gz
Checksums-Sha256: 
 fd368fd44dbdf93c742bc5bf58327d444a9783f376320c1ebf86cf92f9c60b0c 2628 openldap_2.4.23-0ubuntu3.5.dsc
 e3839329c34c145ede6cdb9f0ae7d15638eee11ac5db0887b3c3cadc7492ee54 158394 openldap_2.4.23-0ubuntu3.5.diff.gz
Files: 
 16af2ff6b6ba3d9384a88a255d3556f6 2628 net optional openldap_2.4.23-0ubuntu3.5.dsc
 d5bcebb6c88fdaf2803e254fb976dea2 158394 net optional openldap_2.4.23-0ubuntu3.5.diff.gz
Original-Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel at lists.alioth.debian.org>