Accepted openldap 2.4.31-2+deb7u3 (source amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 01 Jun 2017 18:34:18 +0100
Source: openldap
Binary: slapd slapd-smbk5pwd ldap-utils libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev slapd-dbg
Architecture: source amd64
Version: 2.4.31-2+deb7u3
Distribution: wheezy-security
Urgency: high
Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
ldap-utils - OpenLDAP utilities
libldap-2.4-2 - OpenLDAP libraries
libldap-2.4-2-dbg - Debugging information for OpenLDAP libraries
libldap2-dev - OpenLDAP development libraries
slapd - OpenLDAP server (slapd)
slapd-dbg - Debugging information for the OpenLDAP server (slapd)
slapd-smbk5pwd - Keeps Samba and Kerberos passwords in sync within slapd.
Closes: 863563
Changes:
openldap (2.4.31-2+deb7u3) wheezy-security; urgency=high
.
* CVE-2017-9287: search.c was prone to a double free vulnerability. A user
with access to search the directory could crash slapd by issuing a search
including the "Paged Results" control with a page size of 0.
(Closes: #863563)
Checksums-Sha1:
dc6d567d45976c38421a17da70be838c8db62510 2752 openldap_2.4.31-2+deb7u3.dsc
864e7b6ba54cc00ef5b834fd5b5739a7900dd6e3 4720612 openldap_2.4.31.orig.tar.gz
445f3e4113cf511037190ca49a9abd26bafc5a31 166505 openldap_2.4.31-2+deb7u3.diff.gz
f97d60488e9adbe1585faaca90342201775c0094 1769292 slapd_2.4.31-2+deb7u3_amd64.deb
d3bf4cdc800890c295e53835cf371d68893a4249 79816 slapd-smbk5pwd_2.4.31-2+deb7u3_amd64.deb
1e6b8607994bf846c9d32e3b3124ea19970bc122 346170 ldap-utils_2.4.31-2+deb7u3_amd64.deb
e7e370c80dbfcf987815b6d468480d9c9dd19f04 244112 libldap-2.4-2_2.4.31-2+deb7u3_amd64.deb
97d7d3395a82543188ce2162a7bdcb1e1c4c765e 475172 libldap-2.4-2-dbg_2.4.31-2+deb7u3_amd64.deb
776d2ebe84ae7ae48896924aa8801d4ea99349df 558162 libldap2-dev_2.4.31-2+deb7u3_amd64.deb
2b18742549e5539e993514245679d26671c8c1a6 5524606 slapd-dbg_2.4.31-2+deb7u3_amd64.deb
Checksums-Sha256:
0b62e62a3a4494b75b57f304ed1fdc46d5aa58d6080759431941067b461b52df 2752 openldap_2.4.31-2+deb7u3.dsc
dff60c1044021217ab97a7bdda5a7016015f042db0fbfd566d52abb266d19239 4720612 openldap_2.4.31.orig.tar.gz
699983d42003b2c7402703c33510007c64daafbdf90250199e56bdaf40537aaa 166505 openldap_2.4.31-2+deb7u3.diff.gz
5c30863545eeeec8e1a9dd1aea111d6afa88930f5482eb65bcbeafec7ccf102f 1769292 slapd_2.4.31-2+deb7u3_amd64.deb
af483bc69301bdd6e5357517e3295844fc22b08ab0047a632d296bb1114b98c8 79816 slapd-smbk5pwd_2.4.31-2+deb7u3_amd64.deb
8a1579c45e17746eed6ea41dacff093144ede6ea6e86d0b081b25e1f58208ec3 346170 ldap-utils_2.4.31-2+deb7u3_amd64.deb
e4b10b0162c096afbfce3a2c4f0519f0f8200c3a12d37f207fe818515ee2ac17 244112 libldap-2.4-2_2.4.31-2+deb7u3_amd64.deb
aea08dfd6ff2443e2661dca69f26b56804414d27d18b5f5e2f5db850558ca162 475172 libldap-2.4-2-dbg_2.4.31-2+deb7u3_amd64.deb
248437f2e403ebfea5aeaf1b58ccc6bd86d9443e4af80a2d2947ae2697509b0e 558162 libldap2-dev_2.4.31-2+deb7u3_amd64.deb
6f2c8096a6b2fe61c8e189a6cf5d947dbdbd50f2795690381c7ebee5076a0da5 5524606 slapd-dbg_2.4.31-2+deb7u3_amd64.deb
Files:
d685010b9f8b1eaf5f656dcfa1983443 2752 net optional openldap_2.4.31-2+deb7u3.dsc
a8631b2202d8099143edb57e36b33dea 4720612 net optional openldap_2.4.31.orig.tar.gz
572edd5783afb48beead8026dcf59f94 166505 net optional openldap_2.4.31-2+deb7u3.diff.gz
9efe10fe8286b80c4fe8a4cf2fd53382 1769292 net optional slapd_2.4.31-2+deb7u3_amd64.deb
163b6941221b07ff6491eb88ec1c4fc1 79816 net extra slapd-smbk5pwd_2.4.31-2+deb7u3_amd64.deb
18431dd7b0436282b9f1d3e9fc81d4b5 346170 net optional ldap-utils_2.4.31-2+deb7u3_amd64.deb
f6932e272ca8bf82333818efda88d521 244112 libs standard libldap-2.4-2_2.4.31-2+deb7u3_amd64.deb
99f5f17443a22e55733d8e9a57724c92 475172 debug extra libldap-2.4-2-dbg_2.4.31-2+deb7u3_amd64.deb
8b2292cba74de52b409e2b4c21c3c5aa 558162 libdevel extra libldap2-dev_2.4.31-2+deb7u3_amd64.deb
df465e8d855c872b544cb8b09a78b002 5524606 debug extra slapd-dbg_2.4.31-2+deb7u3_amd64.deb
-----BEGIN PGP SIGNATURE-----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=RsSI
-----END PGP SIGNATURE-----
Reply to: