Re: [PATCH 0/1] Update OpenLDAP, fixing CVE-2015-6908

[Mark H Weaver]

Leo Famulari <address@hidden> writes:

> There is a remote denial of service bug in OpenLDAP in version 2.4.42
> and earlier [0].
>
> This patch updates OpenLDAP to the latest version.
>
> This change will require several hundred packages to be rebuilt. Should
> it go on security-updates? Your advice requested...

I think we'll need to graft this.  Would you like to try grafting it on
your own system, see if anything obvious breaks, and then report back?

  Thank you!
     Mark