[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: OpenLDAP and DH parameter size / LogJam vulnerability



Jens Vagelpohl wrote:
On 15 Jul 2015, at 17:35 , Howard Chu <hyc@symas.com> wrote:

No ITS needed, this code was already rewritten in HEAD, ITS#7506.

Hi Howard,

Since that ITS is several years old I guess the fix is not in OPENLDAP_REL_ENG_2_4?

Surely you can read the ITS yourself.

https://www.openldap.org/its/index.cgi/Software Bugs?id=7506

The fix is in 2.5.

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/