On Fri, Apr 22, 2016 at 11:28:20PM -0400, Mark H Weaver wrote: > Leo Famulari writes: > > > There is a remote denial of service bug in OpenLDAP in version 2.4.42 > > and earlier [0]. > > I think we'll need to graft this. Would you like to try grafting it on > your own system, see if anything obvious breaks, and then report back? I've attached a patch that does seem to work, but as discussed on IRC, it's ugly. Specifically, I've hand-coded the version into the URI string rather than setting the "version" field. Again, your advice requested...