Ubuntu
openldap2.2 package

openldap2.2 2.2.26-5ubuntu2.9 source package in Ubuntu

Changelog

openldap2.2 (2.2.26-5ubuntu2.9) dapper-security; urgency=low

  * SECURITY UPDATE: SSL certificate bypass with NULL CN byte.
    - libraries/libldap/tls.c: get the last CN and check for length match.
    - http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_o.c.diff?r1=1.8&r2=1.12
    - CVE-2009-3767
 -- Marc Deslauriers <email address hidden>   Wed, 11 Nov 2009 11:53:46 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Dapper
Original maintainer:
Torsten Landschoff
Architectures:
any
Section:
net
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
openldap2.2_2.2.26.orig.tar.gz 2.5 MiB 0ae015a4a085b64d208c5f68f349201af2468d84bd199a585d7c0a22722361f9
openldap2.2_2.2.26-5ubuntu2.9.diff.gz 504.0 KiB 8e89f96b6ee750914084e7101dd4da4792bcb5833a21a458ce93f15331b16145
openldap2.2_2.2.26-5ubuntu2.9.dsc 1.0 KiB fa453f922e5627b44e8664a0dd6feb8974787e8d888780ffadc2bc588ffa1041

View changes file

Binary packages built by this source

ldap-utils: No summary available for ldap-utils in ubuntu dapper.

No description available for ldap-utils in ubuntu dapper.

libldap-2.2-7: No summary available for libldap-2.2-7 in ubuntu dapper.

No description available for libldap-2.2-7 in ubuntu dapper.

slapd: No summary available for slapd in ubuntu dapper.

No description available for slapd in ubuntu dapper.