-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 16 Nov 2020 17:23:45 -0800 Source: openldap Architecture: source Version: 2.4.47+dfsg-3+deb10u4 Distribution: buster-security Urgency: high Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel@lists.alioth.debian.org> Changed-By: Ryan Tandy <ryan@nardis.ca> Changes: openldap (2.4.47+dfsg-3+deb10u4) buster-security; urgency=high . * Fix slapd abort due to assertion failure in Certificate List syntax validation (ITS#9383) (CVE-2020-25709) * Fix slapd abort due to assertion failure in CSN normalization with invalid input (ITS#9384) (CVE-2020-25710) Checksums-Sha1: 1036ff522eb9effee45a45990bbdaf294bd5d1d9 3022 openldap_2.4.47+dfsg-3+deb10u4.dsc c1f6720f306b5f65a9e62363b9208de5df5a143f 169604 openldap_2.4.47+dfsg-3+deb10u4.debian.tar.xz Checksums-Sha256: dc2cb7560c5e8a3eb8456a867be5c1e17ad3cbba662b92dbac5c42c86ddbcaf0 3022 openldap_2.4.47+dfsg-3+deb10u4.dsc 2d64862980b182dfa8c1a8b6585729e29e837cf972602e21b18094da8efbb885 169604 openldap_2.4.47+dfsg-3+deb10u4.debian.tar.xz Files: 30bf2a1a8faf091612f20387c1bea3c7 3022 net optional openldap_2.4.47+dfsg-3+deb10u4.dsc ce733caf54608213366ee877dd8f4f6b 169604 net optional openldap_2.4.47+dfsg-3+deb10u4.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl+zgj9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Ez7EP/inGXIC1BoTH2QnxhaDCNT/JnxRwcSLf XojU0Ba+qqjJJ/bL/0lBMPHAFZhCKACKLxLCeDIyKLeBvUrxuN8ggKOazNcyOLlb 14pS5VsabBYLw+wud356JGmXSXirH2ZqO97NnOFHx3H+mtVhXmSaGpndKFIvQ87K d1yDq9HfwIUosytF75Lr6sewVbGI0I27hXyo8FgBUa8RQ/j/haqsMo0Aa0eb8VBb GTaRsOQNBUmUXHsS6f8nDToBzrbyNiTzJsd7TYDglz+xBousaulrTSg/QaRm1LCw h3UDJXMvDn7I6NyTuoMYd5fGkrW6hQ0TXIFo66OTG5VZ+eJ+JfZxtnaNPDsG/iF1 ua/bYrACgsHXF8gowBVgaMLZGpxWwlyFKB5Tsc167Ic0GQ70QwnTcmYmnG7h2bZU RdWutuuAwxYBPyQF4c+BsZS3dhKItES6cRnH0H9gwxBU6EOwh9IIgOqeHke+xzOx 1F0l6l/a0YcfegfNoMrc0Pbze/PAhzK5o5QTo0lHHyuM8mAnHINIPOQh9k1GU7RZ kusk8HQPB65S9E5i4O/cxV0+JnA5qAlG+WujQz0HkENIZlIQHGlqdzEZwirh0um6 /192WXayYys/lQ/wPdQcQLFEPyIeGw8BImprrsWmcy0Jv4Z/wtD3WEG8OY9rbHEq qL6Dc9lotceU =1xXX -----END PGP SIGNATURE-----