openldap2.3 (2.4.9-0ubuntu0.8.04.4) hardy-security; urgency=low
* SECURITY UPDATE: null ptr deref, free uninitialized data in modrdn calls
- openldap-2.4.22-CVE-2010-0211-modrdn_check_error.patch:
- check return for errors and clean up uninitialized data
- openldap-2.4.22-CVE-2010-0212-modrdn_null_deref.patch:
- return error on 0-length or binary RDNs
- CVE-2010-0211, CVE-2010-0212
Date: Thu, 29 Jul 2010 13:40:10 -0700
Changed-By: Steve Beattie <[email protected]>
Maintainer: Ubuntu Core Developers <[email protected]>
https://launchpad.net/ubuntu/hardy/+source/openldap2.3/2.4.9-0ubuntu0.8.04.4
Format: 1.7
Date: Thu, 29 Jul 2010 13:40:10 -0700
Source: openldap2.3
Binary: slapd ldap-utils libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev slapd-dbg
Architecture: source
Version: 2.4.9-0ubuntu0.8.04.4
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu Core Developers <[email protected]>
Changed-By: Steve Beattie <[email protected]>
Description:
ldap-utils - OpenLDAP utilities
libldap-2.4-2 - OpenLDAP libraries
libldap-2.4-2-dbg - Debugging information for OpenLDAP libraries
libldap2-dev - OpenLDAP development libraries
slapd - OpenLDAP server (slapd)
slapd-dbg - Debugging information for the OpenLDAP server (slapd)
Changes:
openldap2.3 (2.4.9-0ubuntu0.8.04.4) hardy-security; urgency=low
.
* SECURITY UPDATE: null ptr deref, free uninitialized data in modrdn calls
- openldap-2.4.22-CVE-2010-0211-modrdn_check_error.patch:
- check return for errors and clean up uninitialized data
- openldap-2.4.22-CVE-2010-0212-modrdn_null_deref.patch:
- return error on 0-length or binary RDNs
- CVE-2010-0211, CVE-2010-0212
Files:
05d2052ae3e6ea8e1b847d0e5fe9e18c 2158 net optional
openldap2.3_2.4.9-0ubuntu0.8.04.4.dsc
3c4b6c99fb3f094f1f1514daeb3f7120 148114 net optional
openldap2.3_2.4.9-0ubuntu0.8.04.4.diff.gz
Original-Maintainer: Debian OpenLDAP Maintainers
<[email protected]>
--
Hardy-changes mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/hardy-changes
