[ubuntu/noble-updates] python-ldap 3.4.4-1ubuntu0.24.04.1 (Accepted)

[Ubuntu Archive Robot]

python-ldap (3.4.4-1ubuntu0.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: Improper special character escape when supplying
    non-string data types.
    - debian/patches/CVE-2025-61911.patch: Raise exception when type is not str
      in Lib/ldap/filter.py.
    - CVE-2025-61911
  * SECURITY UPDATE: Denial of service through improperly escaped null byte.
    - debian/patches/CVE-2025-61912.patch: Change NULL byte escape from \\\000
      to \\00 in Lib/ldap/dn.py.
    - CVE-2025-61912

Date: 2025-10-15 18:54:36.514266+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/python-ldap/3.4.4-1ubuntu0.24.04.1
-------------- next part --------------
Sorry, changesfile not available.