[Security Fix] OpenLDAP

[Adrian Portelli <adrianp%NetBSD.org@localhost>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

On the 22nd May 2008 OpenLDAP 2.4.9 was imported into HEAD. On the 11th
August 2008 the NetBSD Security Officer team became aware of a security
issue in the version imported into HEAD.

The original advisory for this issue can be found at:

~ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2952

This vulnerability does not exist in the NetBSD 3.x or 4.x code bases.
However, NetBSD-current was found to be vulnerable to this issue.

This issue was fixed in the NetBSD CVS tree on the 13th August 2008.
Users currently running NetBSD-current from sources before 13th August
2008 may wish to update their sources.

Users running with sources from after 13th August 2008 will have the
updated OpenLDAP 2.4.11 which includes a fix for this issue.

On behalf of security-officer@,

adrian.
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAkioC24ACgkQLc2rR0mnFJ/hawCgiAVCrsYqS5LI4fKt2nWDNpsS
qLUAoPQ2nf9RdjL87rKpewqVzW5JvBo8
=WA7A
-----END PGP SIGNATURE-----