[SECURITY] [DLA 2544-1] openldap security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- -----------------------------------------------------------------------
Debian LTS Advisory DLA-2544-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Utkarsh Gupta
February 03, 2021 https://wiki.debian.org/LTS
- -----------------------------------------------------------------------
Package : openldap
Version : 2.4.44+dfsg-5+deb9u7
CVE ID : CVE-2020-36221 CVE-2020-36222 CVE-2020-36223
CVE-2020-36224 CVE-2020-36225 CVE-2020-36226
CVE-2020-36227 CVE-2020-36228 CVE-2020-36229
CVE-2020-36230
Several vulnerabilities were discovered in OpenLDAP, a free
implementation of the Lightweight Directory Access Protocol. An
unauthenticated remote attacker can take advantage of these flaws to
cause a denial of service (slapd daemon crash, infinite loops) via
specially crafted packets.
For Debian 9 stretch, these problems have been fixed in version
2.4.44+dfsg-5+deb9u7.
We recommend that you upgrade your openldap packages.
For the detailed security status of openldap please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openldap
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmAadTMACgkQgj6WdgbD
S5ZzNhAArM7LDJnuGydeTuUXcXLJRRuxX0wbiUiKxhL8odBfHqjW5/Syfy5Ea1fp
mkWpARWm7TI8K335FtMl/vqUZ9QIsx7CZWLHLgC4GCKOd9OMrZf5rG4LJpGuhtaR
qVn23br/XP8n9uXACrP7+K21DWehPX6H1eqCj+TuPJbQXSaXLuvE6kTE/g29/F+S
Zs6A3EZhhl2mN9TTIXdqcjZBdlXAQUff0u/564oOw1luc+oa08dxIN2rPLL/n57l
ZReufBWElOJLsn7l4BFaOaBE8ApaC6D/kRj3pNj9XP5XLSR7U8Wvc/Oui4ilQwTQ
+3DvqYKshKDVAGRuRuOSKsvB8/4wSXV8xY5VIhfGh0d/8DAmI4wIrWAQvN72Kl6N
1PAa0o9NrHUQZFf6OLsE3yFEWVkB2gE2QaHG39/La/SECgsx9MmH0n+NhefUBrCl
7yq7bwQfzkYgQaGt/cBDfh5Mlc3RmbVrYujp/nX6ks4vUr2rR8o7OHSYgFvUx0IL
/65OqS7vM0Q3zo+4OjlLwVxboKoT4eiIE19ujtMP94LSmXA1zavWn8w2/Su7LV5W
cMjB5YKY7GDCi5fcxbJ3qsk1Pe7yaKmJXOtcWPHyBnssnEqnzf9L2PckffsnmOon
iCPfVcbPDv45NEUz2t1vbaP3qUAgVN8KHzN9WN6xbyzsOfwxI/o=
=VKWB
-----END PGP SIGNATURE-----
Reply to: