Source: 389-ds-base Followup-For: Bug #1140484 Hi,
This bug is fixed upstream. The upstream fix can be found here: https://github.com/389ds/389-ds-base/commit/862d02961efb281e71ba90a744af41b855df1fa2 The 3.3.1 code base includes this fix. On salsa, we can check this here: https://salsa.debian.org/freeipa-team/389-ds-base/-/blob/debian/3.3.1-1/ldap%2Fservers%2Fplugins%2Facl%2Faclparse.c?ref_type=tags&blame=1#L850 I will tag this bug fixed in 3.3.1-1 (but I do not close it so that you can add the closes and CVE in the changelog) Regards, Vincent -- System Information: Debian Release: forky/sid APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'oldstable-updates'), (500, 'oldstable-security'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 7.2.12+deb14-amd64 (SMP w/4 CPU threads; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system)

