From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: [PATCH 0/1] Update OpenLDAP, fixing CVE-2015-6908 Date: Sun, 24 Apr 2016 15:04:56 -0400 Message-ID: <20160424190456.GA9128@jasmine> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:56009) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1auPL2-0000Vw-OR for guix-devel@gnu.org; Sun, 24 Apr 2016 15:05:01 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1auPKy-0001nm-K9 for guix-devel@gnu.org; Sun, 24 Apr 2016 15:05:00 -0400 Received: from out2-smtp.messagingengine.com ([66.111.4.26]:37594) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1auPKy-0001ni-GV for guix-devel@gnu.org; Sun, 24 Apr 2016 15:04:56 -0400 Received: from localhost (c-69-249-5-231.hsd1.pa.comcast.net [69.249.5.231]) by mail.messagingengine.com (Postfix) with ESMTPA id 0AD0E68015C for ; Sun, 24 Apr 2016 15:04:56 -0400 (EDT) Content-Disposition: inline In-Reply-To: List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org On Thu, Apr 21, 2016 at 02:57:48PM -0400, Leo Famulari wrote: > There is a remote denial of service bug in OpenLDAP in version 2.4.42 > and earlier [0]. > > This patch updates OpenLDAP to the latest version. > > This change will require several hundred packages to be rebuilt. Should > it go on security-updates? Your advice requested... Fixed on master, with a graft, as 80c13759745. > > [0] > https://cve.mitre.org/cgi-bin/cvename.cgi?name=2015-6908 > > Leo Famulari (1): > gnu: openldap: Update to 2.4.44 [fixes CVE-2015-6908]. > > gnu/packages/openldap.scm | 5 +++-- > 1 file changed, 3 insertions(+), 2 deletions(-) > > -- > 2.7.4 >