-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 28 May 2017 16:08:03 -0700 Source: openldap Binary: slapd slapd-smbk5pwd ldap-utils libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev slapd-dbg Architecture: source Version: 2.4.40+dfsg-1+deb8u3 Distribution: jessie-security Urgency: high Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel@lists.alioth.debian.org> Changed-By: Ryan Tandy <ryan@nardis.ca> Closes: 863563 Description: ldap-utils - OpenLDAP utilities libldap-2.4-2 - OpenLDAP libraries libldap-2.4-2-dbg - Debugging information for OpenLDAP libraries libldap2-dev - OpenLDAP development libraries slapd - OpenLDAP server (slapd) slapd-dbg - Debugging information for the OpenLDAP server (slapd) slapd-smbk5pwd - Keeps Samba and Kerberos passwords in sync within slapd. Changes: openldap (2.4.40+dfsg-1+deb8u3) jessie-security; urgency=high . * debian/patches/ITS-8655-paged-results-double-free.patch: Fix a double free in the MDB backend on a search including the Paged Results control with a page size of 0. (ITS#8655) (CVE-2017-9287) (Closes: #863563) Checksums-Sha1: dc7cb72188f4ec15c2e5fce875c8ed8ff1e20a9e 2990 openldap_2.4.40+dfsg-1+deb8u3.dsc 94705cf6bd8b8672590e5b33a55a59033948af42 180281 openldap_2.4.40+dfsg-1+deb8u3.diff.gz Checksums-Sha256: 6e5877b1e071abdf613849689bff4bde15f8ac8dd4277a14cd30afb240052dd4 2990 openldap_2.4.40+dfsg-1+deb8u3.dsc b6e7709cc75470bac1e6a797beed18c32ac97ac925932fad596a4921218b4d57 180281 openldap_2.4.40+dfsg-1+deb8u3.diff.gz Files: bb76beec77fb851d2843aa2e31eec72d 2990 net optional openldap_2.4.40+dfsg-1+deb8u3.dsc 4406d83fdc37a70ec72fd640a3c86115 180281 net optional openldap_2.4.40+dfsg-1+deb8u3.diff.gz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlktGvNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ES58P/3hV3y1WEhZ91PkDJeq3/cua9TyFGiIf z5N3m/k5ia7DthDGXKkhQtGc9sd7eJ6Ea41HwPs2K737dTCOhjidZZSzNuGJY4mL jLlDICG6RRT9xccgQZTkBnUKLcvn9LYmTrAINxRN6DjCI2xOSybMhLP5/ipxGRDx neOCe3x7vUntTFOCX3Sq6LyLAprg9bkDRMlJ5UFeVINVVB4DC7gyNm+3D32YIjQT ZFo3/2XuHusksQsN+3vwN8f1YpF1hCEzzWWqVMdGjf7tZoakog7yLxwaN7ujpLuF VLB4OcVRrYSNzL6sVtDOYvzEzf6siq0yWevsHw3TRxPQDhYsrePEfmjg6pEI94hx M88yo5uERhOn4KJWTk0ssPuZVYzyNCO49121xq9CP1TuU+oNFozz9xFTe7KUj3bi 65yA/Ihq/vr6QPCsqnDVPr/RJyW2f6Lx7ce6W/p6eRwp56QYhfKsvmze6RwigxGW yX+RIf0lbd9QlNErlZmDHV5bNlmm4k/yNCD/XW44mkHQStTWZ83z9IPKEzc/F8EX fIthHzTH6tBZ8ijSf6VPojE7Lo/IJwaymQnYNULUxQ8rm0/IP00op56seOyOp1Rw gKMVhgk0MSBjJjmoE8dTmx3W2BZbuQW0ii08ig1feoIjmbbPaiMduhCwHiZcW2MC RJGDq0aF/isE =wjPe -----END PGP SIGNATURE-----