summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
Ryan Tandy [Fri, 22 Jan 2021 03:54:40 +0000 (03:54 +0000)]
openldap (2.4.47+dfsg-3+deb10u5) buster-security; urgency=high
* Fix slapd crashes in Certificate Exact Assertion processing
(ITS#9404, ITS#9424) (CVE-2020-36221)
* Fix slapd assertion failures in saslAuthzTo validation
(ITS#9406, ITS#9407) (CVE-2020-36222)
* Fix slapd crash in Values Return Filter control handling
(ITS#9408) (CVE-2020-36223)
* Fix slapd crashes in saslAuthzTo processing (ITS#9409, ITS#9412, ITS#9413)
(CVE-2020-36224, CVE-2020-36225, CVE-2020-36226)
* Fix slapd assertion failure in X.509 DN parsing
(ITS#9423) (CVE-2020-36230)
* Fix slapd crash in X.509 DN parsing (ITS#9425) (CVE-2020-36229)
* Fix slapd crash in Certificate List Exact Assertion processing
(ITS#9427) (CVE-2020-36228)
* Fix slapd infinite loop with Cancel operation (ITS#9428) (CVE-2020-36227)
[dgit import unpatched openldap 2.4.47+dfsg-3+deb10u5]
Ryan Tandy [Fri, 22 Jan 2021 03:54:40 +0000 (03:54 +0000)]
Import openldap_2.4.47+dfsg-3+deb10u5.debian.tar.xz
[dgit import tarball openldap 2.4.47+dfsg-3+deb10u5 openldap_2.4.47+dfsg-3+deb10u5.debian.tar.xz]
Ryan Tandy [Sun, 23 Dec 2018 20:50:40 +0000 (20:50 +0000)]
Import openldap_2.4.47+dfsg.orig.tar.gz
[dgit import orig openldap_2.4.47+dfsg.orig.tar.gz]