Branches for Precise

Name Status Last Modified Last Commit
lp:ubuntu/precise/openldap bug 2 Mature 2012-04-05 16:50:38 UTC
50. debian/control: Build-Depends on dh-a...

Author: Jamie Strandboge
Revision Date: 2012-04-05 09:34:37 UTC

debian/control: Build-Depends on dh-apparmor (LP: #948481)

lp:ubuntu/precise-proposed/openldap bug 2 Mature 2013-09-19 22:45:16 UTC
54. * Backport fix for back-mdb, fixes cr...

Author: Roel Standaert
Revision Date: 2013-08-31 08:29:45 UTC

* Backport fix for back-mdb, fixes crash when deleting an entry
  that contains an indexed numeric attribute (LP: #1216650):
  - d/patches/its-7174-lutil_str2bin-cant-modify-input-strings.patch:
    Upstream patch to make sure that lutil_str2bin does not
    attempt to modify its input.

lp:ubuntu/precise-security/openldap bug 2 Mature 2015-05-28 06:15:17 UTC
51. * SECURITY UPDATE: denial of service ...

Author: Felipe Reyes
Revision Date: 2015-05-19 11:53:17 UTC

* SECURITY UPDATE: denial of service via an LDAP search query
  with attrsOnly set to true. (LP: #1446809)
  - debian/patches/CVE-2012-1164.1.patch: don't leave empty slots in
    normalized attr values
  - debian/patches/CVE-2012-1164.2.patch: add FIXME comment, note that
    current patch is not ideal
  - debian/patches/CVE-2012-1164.3.patch: fix attr_dup2 when no values are
    present (attrsOnly = TRUE)
  - CVE-2012-1164
* SECURITY UPDATE: fix rwm overlay reference counting
  - debian/patches/CVE-2013-4449.patch: fix reference counting
  - CVE-2013-4449
* SECURITY UPDATE: fix NULL pointer dereference in deref_parseCtrl()
  - debian/patches/CVE-2015-1545.patch: require non-empty AttributeList
  - CVE-2015-1545

lp:ubuntu/precise-updates/openldap 2 Mature 2015-05-19 11:53:17 UTC
51. * SECURITY UPDATE: denial of service ...

Author: Felipe Reyes
Revision Date: 2015-05-19 11:53:17 UTC

* SECURITY UPDATE: denial of service via an LDAP search query
  with attrsOnly set to true. (LP: #1446809)
  - debian/patches/CVE-2012-1164.1.patch: don't leave empty slots in
    normalized attr values
  - debian/patches/CVE-2012-1164.2.patch: add FIXME comment, note that
    current patch is not ideal
  - debian/patches/CVE-2012-1164.3.patch: fix attr_dup2 when no values are
    present (attrsOnly = TRUE)
  - CVE-2012-1164
* SECURITY UPDATE: fix rwm overlay reference counting
  - debian/patches/CVE-2013-4449.patch: fix reference counting
  - CVE-2013-4449
* SECURITY UPDATE: fix NULL pointer dereference in deref_parseCtrl()
  - debian/patches/CVE-2015-1545.patch: require non-empty AttributeList
  - CVE-2015-1545

lp:~gandelman-a/ubuntu/precise/openldap/proposed-rebuild bug(Has a merge proposal) 1 Development 2012-05-04 22:23:00 UTC
52. Fix changelog entry

Author: Adam Gandelman
Revision Date: 2012-05-04 22:23:00 UTC

Fix changelog entry

lp:~s-roel/ubuntu/precise/openldap/bug-1216650 bug(Has a merge proposal) 1 Development 2013-08-31 06:59:04 UTC
54. * Backport fix for back-mdb, fixes cr...

Author: Roel Standaert
Revision Date: 2013-08-31 06:36:42 UTC

* Backport fix for back-mdb, fixes crash when deleting an entry
  that contains an indexed numeric attribute (LP: #1216650):
  - d/patches/its-7174-lutil_str2bin-cant-modify-input-strings.patch:
    Upstream patch to make sure that lutil_str2bin does not
    attempt to modify its input.

16 of 6 results