Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found -2 articles for you...
100
security advisorymoderateSuSESUSE Linux 16.0 Python-LDAP Moderate Patch Advisory 2026-20933-1
An update that solves two vulnerabilities can now be installed.. # Security update for python-ldap Announcement ID: SUSE-SU-2026:20933-1 Release Date: 2026-03-25T10:40:32Z Rating: moderate References: * bsc#1251912 * bsc#1251913 Cross-References: * CVE-2025-61911 * CVE-2025-61912 CVSS scores: * CVE-2025-61911 ( SUSE ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61911 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2025-61911 ( NVD ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61911 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2025-61912 ( SUSE ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61912 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-61912 ( NVD ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61912 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server - BCI 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-ldap fixes the following issues: * CVE-2025-61911: Enforce str for escape_filter_chars (bsc#1251912). * CVE-2025-61912: Escape NULs as per RFC 4514 in escape_dn_chars (bsc#1251913). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listedfor your product: * SUSE Linux Enterprise Server - BCI 16.0 zypper in -t patch SUSE-SLES-16.0-443=1 ## Package List: * SUSE Linux Enterprise Server - BCI 16.0 (aarch64 ppc64le s390x x86_64) * python313-ldap-debuginfo-3.4.4-160000.3.1 * python-ldap-debugsource-3.4.4-160000.3.1 * python313-ldap-3.4.4-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-61911.html * https://www.suse.com/security/cve/CVE-2025-61912.html * https://bugzilla.suse.com/show_bug.cgi?id=1251912 * https://bugzilla.suse.com/show_bug.cgi?id=1251913 . Update for python-ldap resolves two issues with moderate severity. Applying this patch secures SUSE Linux Enterprise Server.. python-ldap updates, SUSE security advisory, security patch update. . LinuxSecurity.com Team
Apr 01, 2026
SuSE
202
security advisorymoderatesecurity updateopenSUSE Leap 16.0 Python-LDAP Moderate Update 2026-20421-1
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.. openSUSE security update: security update for python-ldap ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20421-1 Rating: moderate References: * bsc#1251912 * bsc#1251913 Cross-References: * CVE-2025-61911 * CVE-2025-61912 CVSS scores: * CVE-2025-61911 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2025-61911 ( SUSE ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61912 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-61912 ( SUSE ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed. Description: This update for python-ldap fixes the following issues: - CVE-2025-61911: Enforce str for escape_filter_chars (bsc#1251912). - CVE-2025-61912: Escape NULs as per RFC 4514 in escape_dn_chars (bsc#1251913). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-443=1 Package List: - openSUSE Leap 16.0: python313-ldap-3.4.4-160000.3.1 References: * https://www.suse.com/security/cve/CVE-2025-61911.html * https://www.suse.com/security/cve/CVE-2025-61912.html . This update addresses two moderate vulnerabilities and two bugs in openSUSE's python-ldap package for Leap 16.0.. openSUSE, python-ldap, moderate risk, security update.. LinuxSecurity.com Team
Mar 28, 2026
OpenSUSE
202
security advisorymoderatesecurity issueopenSUSE: python-ldap Moderate Update for Security Issues 2025:3714-1
An update that solves two vulnerabilities can now be installed.. # Security update for python-ldap Announcement ID: SUSE-SU-2025:3714-1 Release Date: 2025-10-22T07:11:02Z Rating: moderate References: * bsc#1251912 * bsc#1251913 Cross-References: * CVE-2025-61911 * CVE-2025-61912 CVSS scores: * CVE-2025-61911 ( SUSE ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61911 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2025-61911 ( NVD ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61912 ( SUSE ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61912 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-61912 ( NVD ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-ldap fixes the following issues: * CVE-2025-61911: Enforce str for escape_filter_chars (bsc#1251912). * CVE-2025-61912: Escape NULs as per RFC 4514 in escape_dn_chars (bsc#1251913). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or"zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-3714=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-3714=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-3714=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python3-ldap-3.4.0-150400.3.3.1 * python3-ldap-debuginfo-3.4.0-150400.3.3.1 * python-ldap-debugsource-3.4.0-150400.3.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python-ldap-debugsource-3.4.0-150400.3.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * python-ldap-debugsource-3.4.0-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-61911.html * https://www.suse.com/security/cve/CVE-2025-61912.html * https://bugzilla.suse.com/show_bug.cgi?id=1251912 * https://bugzilla.suse.com/show_bug.cgi?id=1251913 . An update for python-ldap fixes critical security issues to enhance stability in openSUSE systems. Try it to safeguard your applications.. openSUSE Security Python LDAP Update. . LinuxSecurity.com Team
Oct 22, 2025
OpenSUSE
100
security advisorymoderateSuSESUSE: python-ldap Moderate Security Update for CVE-2025-61911 2025:3714-1
* bsc#1251912 * bsc#1251913 Cross-References: * CVE-2025-61911 . # Security update for python-ldap Announcement ID: SUSE-SU-2025:3714-1 Release Date: 2025-10-22T07:11:02Z Rating: moderate References: * bsc#1251912 * bsc#1251913 Cross-References: * CVE-2025-61911 * CVE-2025-61912 CVSS scores: * CVE-2025-61911 ( SUSE ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61911 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2025-61911 ( NVD ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61912 ( SUSE ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61912 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-61912 ( NVD ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-ldap fixes the following issues: * CVE-2025-61911: Enforce str for escape_filter_chars (bsc#1251912). * CVE-2025-61912: Escape NULs as per RFC 4514 in escape_dn_chars (bsc#1251913). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or"zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-3714=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-3714=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-3714=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python3-ldap-3.4.0-150400.3.3.1 * python3-ldap-debuginfo-3.4.0-150400.3.3.1 * python-ldap-debugsource-3.4.0-150400.3.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python-ldap-debugsource-3.4.0-150400.3.3.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * python-ldap-debugsource-3.4.0-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-61911.html * https://www.suse.com/security/cve/CVE-2025-61912.html * https://bugzilla.suse.com/show_bug.cgi?id=1251912 * https://bugzilla.suse.com/show_bug.cgi?id=1251913 . A security advisory detailing a moderate update for python-ldap on SUSE addressing specific issues and vulnerabilities.. python ldap security,SUSE updates,moderate threat,CVE-2025-61911. . LinuxSecurity.com Team
Oct 22, 2025
SuSE
100
security advisorymoderateSuSESUSE: python-ldap Moderate Escape Filter Issues CVE-2025-61911 2025:3695-1
* bsc#1251912 * bsc#1251913 Cross-References: * CVE-2025-61911 . # Security update for python-ldap Announcement ID: SUSE-SU-2025:3695-1 Release Date: 2025-10-21T06:18:04Z Rating: moderate References: * bsc#1251912 * bsc#1251913 Cross-References: * CVE-2025-61911 * CVE-2025-61912 CVSS scores: * CVE-2025-61911 ( SUSE ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61911 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2025-61911 ( NVD ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61912 ( SUSE ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-61912 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-61912 ( NVD ): 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Package Hub 15 15-SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-ldap fixes the following issues: * CVE-2025-61911: Enforce str for escape_filter_chars (bsc#1251912). * CVE-2025-61912: Escape NULs as per RFC 4514 in escape_dn_chars (bsc#1251913). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run thecommand listed for your product: * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-3695=1 ## Package List: * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * python-ldap-debuginfo-3.1.0-150100.3.5.1 * python-ldap-debugsource-3.1.0-150100.3.5.1 ## References: * https://www.suse.com/security/cve/CVE-2025-61911.html * https://www.suse.com/security/cve/CVE-2025-61912.html * https://bugzilla.suse.com/show_bug.cgi?id=1251912 * https://bugzilla.suse.com/show_bug.cgi?id=1251913 . Update for python-ldap addressing escape filter and NUL character issues on SUSE systems. Moderate severity advisories included.. python ldap security update, SUSE advisory, escape filter characters. . LinuxSecurity.com Team
Oct 21, 2025
SuSE
172
security advisorydenial of serviceUbuntuUbuntu 25.10: Python LDAP Important LDAP Injection Issues USN-7828-1
Several security issues were fixed in Python LDAP.. ========================================================================== Ubuntu Security Notice USN-7828-1 October 20, 2025 python-ldap vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in Python LDAP. Software Description: - python-ldap: LDAP interface module for Python Details: It was discovered that Python LDAP incorrectly handled special characters in the special character filtering function. A remote attacker could possibly use this issue to perform LDAP injection attacks. (CVE-2025-61911) Arad Inbar discovered that Python LDAP incorrectly escaped NUL character bytes. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-61912) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 python3-ldap 3.4.4-1ubuntu0.25.10.1 Ubuntu 25.04 python3-ldap 3.4.4-1ubuntu0.25.04.1 Ubuntu 24.04 LTS python3-ldap 3.4.4-1ubuntu0.24.04.1 Ubuntu 22.04 LTS python3-ldap 3.2.0-4ubuntu7.2 Ubuntu 20.04 LTS python3-ldap 3.2.0-4ubuntu2.1+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS python-ldap 3.0.0-1ubuntu0.2+esm1 Available with Ubuntu Pro python3-ldap 3.0.0-1ubuntu0.2+esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS python-ldap 2.4.22-0.1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7828-1 CVE-2025-61911, CVE-2025-61912 Package Information: https://launchpad.net/ubuntu/+source/python-ldap/3.4.4-1ubuntu0.25.10.1 https://launchpad.net/ubuntu/+source/python-ldap/3.4.4-1ubuntu0.24.04.1 https://launchpad.net/ubuntu/+source/python-ldap/3.2.0-4ubuntu7.2 . Several security fixes in Python LDAP for multiple Ubuntu releases enhance system integrity against attacks.. python ldap, ubuntu security, ldap injection, denial of service, security update. . LinuxSecurity.com Team
Oct 20, 2025
Ubuntu
172
security advisorydenial of servicecritical threatUbuntu: 22.04 LTS: USN-5508-1 Critical: Python LDAP Denial Of Service
Python LDAP could be made to denial of service if it received a specially crafted regular expression.. =========================================================================Ubuntu Security Notice USN-5508-1 July 11, 2022 python-ldap vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 21.10 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Python LDAP could be made to denial of service if it received a specially crafted regular expression. Software Description: - python-ldap: LDAP interface module for Python3 Details: It was discovered that Python LDAP incorrectly handled certain regular expressions. An remote attacker could possibly use this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: python3-ldap 3.2.0-4ubuntu7.1 python3-pyldap 3.2.0-4ubuntu7.1 Ubuntu 21.10: python3-ldap 3.2.0-4ubuntu5.1 python3-pyldap 3.2.0-4ubuntu5.1 Ubuntu 20.04 LTS: python3-ldap 3.2.0-4ubuntu2.1 python3-pyldap 3.2.0-4ubuntu2.1 Ubuntu 18.04 LTS: python-ldap 3.0.0-1ubuntu0.2 python-pyldap 3.0.0-1ubuntu0.2 python3-ldap 3.0.0-1ubuntu0.2 python3-pyldap 3.0.0-1ubuntu0.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5508-1 CVE-2021-46823 Package Information: https://launchpad.net/ubuntu/+source/python-ldap/3.2.0-4ubuntu7.1 https://launchpad.net/ubuntu/+source/python-ldap/3.2.0-4ubuntu5.1 https://launchpad.net/ubuntu/+source/python-ldap/3.2.0-4ubuntu2.1 https://launchpad.net/ubuntu/+source/python-ldap/3.0.0-1ubuntu0.2 . Exploitation of Python LDAP may lead to denial of service when providedwith specially designed input. Guidance for applying updates on Ubuntu platforms is provided.. Python LDAP Update, Denial of Service Fix, Ubuntu Security Patch. . LinuxSecurity.com Team
Jul 11, 2022
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!