[ubuntu/plucky-updates] python-ldap 3.4.4-1ubuntu0.25.04.1 (Accepted)

Ubuntu Archive Robot ubuntu-archive-robot at lists.canonical.com
Mon Oct 20 15:58:29 UTC 2025


python-ldap (3.4.4-1ubuntu0.25.04.1) plucky-security; urgency=medium

  * SECURITY UPDATE: Improper special character escape when supplying
    non-string data types.
    - debian/patches/CVE-2025-61911.patch: Raise exception when type is not str
      in Lib/ldap/filter.py.
    - CVE-2025-61911
  * SECURITY UPDATE: Denial of service through improperly escaped null byte.
    - debian/patches/CVE-2025-61912.patch: Change NULL byte escape from \\\000
      to \\00 in Lib/ldap/dn.py.
    - CVE-2025-61912

Date: 2025-10-15 18:52:13.108715+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/python-ldap/3.4.4-1ubuntu0.25.04.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the plucky-changes mailing list