Race condition in nss_ldap

Debian Bug report logs - #453868
Race condition in nss_ldap

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Gokdeniz Karadag <gokdeniz@cclub.metu.edu.tr>

To: submit@bugs.debian.org

Subject: Race condition in nss_ldap

Date: Sat, 01 Dec 2007 22:37:03 +0200

Package: libnss-ldap
Tags: security

It is reported that there is a race condition in libnss-ldap package and it
caused problems with dovecot imap/pop server.

Reference [1] states that nss_ldap version 258 solves the issue.


[1] http://bugs.gentoo.org/show_bug.cgi?id=198390
[2] http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0255
[3] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5794

Message #10 received at 453868-done@bugs.debian.org (full text, mbox, reply):

From: Steffen Joeris <steffen.joeris@skolelinux.de>

To: 453868-done@bugs.debian.org

Subject: fixed

Date: Tue, 4 Dec 2007 12:52:15 +0100

[Message part 1 (text/plain, inline)]

Hi

This issue was fixed in 256-1 . Now, unstable and testing contain 258-1 .
Therefore, closing this bug now.

Cheers
Steffen

[signature.asc (application/pgp-signature, inline)]

Message #15 received at 453868@bugs.debian.org (full text, mbox, reply):

From: Edward Allcutt <edward@allcutt.me.uk>

To: 453868@bugs.debian.org

Cc: Richard A Nelson <cowboy@debian.org>, Steffen Joeris <steffen.joeris@skolelinux.de>

Subject: unfixed in etch, sarge

Date: Fri, 07 Dec 2007 23:40:17 -0500

[Message part 1 (text/plain, inline)]

According to http://security-tracker.debian.net/tracker/CVE-2007-5794
this bug is still an issue in stable and oldstable. Is a backported
patch feasible?

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.