[Pkg-openldap-devel] Debian OpenLDAP CVE-2010-0211, CVE-2010-0212

[Quanah Gibson-Mount]

--On Thursday, July 22, 2010 4:57 PM +0200 Matthijs Mohlmann 
<matthijs at cacholong.nl> wrote:

> Hi Joonas,
>
>
> I'm aware of it, it was brought to my attention and a patch will be
> worked on.

Here's the patch I used against OpenLDAP 2.4.22.  I don't see that either 
of the reported issues allow code execution.

--Quanah

--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra ::  the leader in open source messaging and collaboration
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ITS6570.patch
Type: application/octet-stream
Size: 2552 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-openldap-devel/attachments/20100722/53cce495/attachment.obj>