[ubuntu/plucky-updates] python-ldap 3.4.4-1ubuntu0.25.04.1 (Accepted)
Ubuntu Archive Robot
ubuntu-archive-robot at lists.canonical.com
Mon Oct 20 15:58:29 UTC 2025
python-ldap (3.4.4-1ubuntu0.25.04.1) plucky-security; urgency=medium
* SECURITY UPDATE: Improper special character escape when supplying
non-string data types.
- debian/patches/CVE-2025-61911.patch: Raise exception when type is not str
in Lib/ldap/filter.py.
- CVE-2025-61911
* SECURITY UPDATE: Denial of service through improperly escaped null byte.
- debian/patches/CVE-2025-61912.patch: Change NULL byte escape from \\\000
to \\00 in Lib/ldap/dn.py.
- CVE-2025-61912
Date: 2025-10-15 18:52:13.108715+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/python-ldap/3.4.4-1ubuntu0.25.04.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the plucky-changes
mailing list