An openldap security update has been released for Debian GNU/Linux 8 Extended LTS to address several vulnerabilities.

ELA-358-1 openldap security update

Package openldap
Version 2.4.40+dfsg-1+deb8u9
Related CVEs CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230

Several vulnerabilities were discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can take advantage of these flaws to cause a denial of service (slapd daemon crash, infinite loops) via specially crafted packets.

For Debian 8 jessie, these problems have been fixed in version 2.4.40+dfsg-1+deb8u9.

We recommend that you upgrade your openldap packages.

Further information about Extended LTS security advisories can be found at: https://deb.freexian.com/extended-lts/

  ELA-358-1 openldap security update