ldb 2:2.2.3-0ubuntu0.20.04.3 source package in Ubuntu

Changelog

ldb (2:2.2.3-0ubuntu0.20.04.3) focal-security; urgency=medium

  * SECURITY UPDATE: MaxQueryDuration not honoured in Samba AD DC LDAP
    - debian/patches/CVE-2021-3670.patch: Confirm the request has not yet
      timed out in ldb filter processing in ldb_key_value/ldb_kv.c,
      ldb_key_value/ldb_kv.h, ldb_key_value/ldb_kv_index.c,
      ldb_key_value/ldb_kv_search.c.
    - CVE-2021-3670
  * SECURITY UPDATE: use-after-free via  LDAP add or modify request
    - debian/patches/CVE-2022-32745_6-06.patch: Use LDB_FLAG_MOD_TYPE()
      for flags equality check in modules/rdn_name.c.
    - debian/patches/CVE-2022-32745_6-10.patch: Add flag to mark message
      element values as shared in common/ldb_msg.c, include/ldb_module.h.
    - debian/patches/CVE-2022-32745_6-11.patch: Ensure shallow copy
      modifications do not affect original message in common/ldb_msg.c,
      include/ldb.h.
    - debian/patches/CVE-2022-32745_6-12.patch: Add functions for appending
      to an ldb_message in common/ldb_msg.c, include/ldb.h.
    - debian/patches/CVE-2022-32745_6-13.patch: Make use of functions for
      appending to an ldb_message in ldb_map/ldb_map.c,
      ldb_map/ldb_map_inbound.c, modules/rdn_name.c.
    - CVE-2022-32746
  * debian/libldb2.symbols: added new symbols.

 -- Marc Deslauriers <email address hidden>  Mon, 18 Jul 2022 07:57:54 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
ldb_2.2.3.orig.tar.gz 1.6 MiB a2f54ff1bc05f0a8d1e08300936cb9a5224ffe09357fe16d4f689beeaba3e941
ldb_2.2.3-0ubuntu0.20.04.3.debian.tar.xz 27.1 KiB 7b2ee57e62b1c4f3409c513c66c4a157ee3d27d0f931ac0c7d9cff5159667d2b
ldb_2.2.3-0ubuntu0.20.04.3.dsc 2.5 KiB aec6ee4db74bc7793a9ad3dc0af44a75f0ce6926f9a0f54581b4c7d300f5182a

View changes file

Binary packages built by this source

ldb-tools: LDAP-like embedded database - tools

 ldb is a LDAP-like embedded database built on top of TDB.
 .
 What ldb does is provide a fast database with an LDAP-like API designed
 to be used within an application. In some ways it can be seen as a
 intermediate solution between key-value pair databases and a real LDAP
 database.
 .
 This package contains bundled test and utility binaries

ldb-tools-dbgsym: debug symbols for ldb-tools
libldb-dev: LDAP-like embedded database - development files

 ldb is a LDAP-like embedded database built on top of TDB.
 .
 What ldb does is provide a fast database with an LDAP-like API designed
 to be used within an application. In some ways it can be seen as a
 intermediate solution between key-value pair databases and a real LDAP
 database.
 .
 This package contains the development files.

libldb2: LDAP-like embedded database - shared library

 ldb is a LDAP-like embedded database built on top of TDB.
 .
 It provides a fast database with an LDAP-like API designed
 to be used within an application. In some ways it can be seen as a
 intermediate solution between key-value pair databases and a real LDAP
 database.
 .
 This package contains the shared library file.

libldb2-dbgsym: debug symbols for libldb2
python3-ldb: Python 3 bindings for LDB

 ldb is a LDAP-like embedded database built on top of TDB.
 .
 This package contains the Python 3 bindings.

python3-ldb-dbgsym: debug symbols for python3-ldb
python3-ldb-dev: LDB Python 3 bindings - development files

 ldb is a LDAP-like embedded database built on top of TDB.
 .
 It is a fast database with an LDAP-like API designed
 to be used within an application. In some ways it can be seen as a
 intermediate solution between key-value pair databases and a real LDAP
 database.
 .
 This package contains the development files for the Python 3 bindings.