[ubuntu/jammy-security] python-ldap 3.2.0-4ubuntu7.2 (Accepted)

[Hlib Korzhynskyy]

python-ldap (3.2.0-4ubuntu7.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Improper special character escape when supplying
    non-string data types.
    - debian/patches/CVE-2025-61911.patch: Raise exception when type is not str
      in Lib/ldap/filter.py.
    - CVE-2025-61911
  * SECURITY UPDATE: Denial of service through improperly escaped null byte.
    - debian/patches/CVE-2025-61912.patch: Change NULL byte escape from \\\000
      to \\00 in Lib/ldap/dn.py.
    - CVE-2025-61912

Date: 2025-10-15 20:36:12.520937+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
https://launchpad.net/ubuntu/+source/python-ldap/3.2.0-4ubuntu7.2
-------------- next part --------------
Sorry, changesfile not available.