diff options
| author | Gyorgy Sarvari <skandigraun@gmail.com> | 2026-01-15 02:00:46 +1300 |
|---|---|---|
| committer | Anuj Mittal <anuj.mittal@oss.qualcomm.com> | 2026-01-19 12:15:40 +0530 |
| commit | 2116f0aff190a43fe65ae817b2833f36bdd127ea (patch) | |
| tree | 65d6c8db53f07b7ffb1df1765df559b11c15b05c /meta-python/recipes-devtools/python/python3-marshmallow_3.21.3.bb | |
| parent | c4fd3d6816694b169334d6cbe0b6e2442febca0f (diff) | |
| download | meta-openembedded-2116f0aff190a43fe65ae817b2833f36bdd127ea.tar.gz | |
python3-ldap: upgrade 3.4.4 -> 3.4.5
Contains fixes for CVE-2025-61911 and CVE-2025-61912
Changelog:
Security fixes:
- CVE-2025-61911 (GHSA-r7r6-cc7p-4v5m): Enforce str input in
ldap.filter.escape_filter_chars with escape_mode=1; ensure proper
escaping.
- CVE-2025-61912 (GHSA-p34h-wq7j-h5v6): Correct NUL escaping in
ldap.dn.escape_dn_chars to \00 per RFC 4514.
Fixes:
- ReconnectLDAPObject now properly reconnects on UNAVAILABLE, CONNECT_ERROR
and TIMEOUT exceptions (previously only SERVER_DOWN), fixing reconnection
issues especially during server restarts
- Fixed syncrepl.py to use named constants instead of raw decimal values
for result types
- Fixed error handling in SearchNoOpMixIn to prevent a undefined variable error
Tests:
- Added comprehensive reconnection test cases including concurrent operation
handling and server restart scenarios
Doc:
- Updated installation docs and fixed various documentation typos
- Added ReadTheDocs configuration file
Infrastructure:
- Add testing and document support for Python 3.13
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9eabbca90565e4ae790bedeef9a91df1878c6f93)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Diffstat (limited to 'meta-python/recipes-devtools/python/python3-marshmallow_3.21.3.bb')
0 files changed, 0 insertions, 0 deletions