[ubuntu/questing-security] python-ldap 3.4.4-1ubuntu0.25.10.1 (Accepted)

[Hlib Korzhynskyy]

python-ldap (3.4.4-1ubuntu0.25.10.1) questing-security; urgency=medium

  * SECURITY UPDATE: Improper special character escape when supplying
    non-string data types.
    - debian/patches/CVE-2025-61911.patch: Raise exception when type is not str
      in Lib/ldap/filter.py.
    - CVE-2025-61911
  * SECURITY UPDATE: Denial of service through improperly escaped null byte.
    - debian/patches/CVE-2025-61912.patch: Change NULL byte escape from \\\000
      to \\00 in Lib/ldap/dn.py.
    - CVE-2025-61912

Date: 2025-10-15 18:51:13.324415+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
https://launchpad.net/ubuntu/+source/python-ldap/3.4.4-1ubuntu0.25.10.1
-------------- next part --------------
Sorry, changesfile not available.