Debian/python-ldap: medium 6.5
python-ldap is a lightweight directory access protocol (LDAP) client API for Python. In versions prior to 3.4.5, the sanitization method `ldap.filter.escape_filter_chars` can be tricked to skip escapi
Action: Upgrade python-ldap to 3.4.4-1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.4.4-1+deb13u1 | - |
Fixed versions
| 3.4.4-1+deb13u1 |
Sources
- osv: DEBIAN-CVE-2025-61911#Debian:13/python-ldap
- https://security-tracker.debian.org/tracker/CVE-2025-61911
published · modified · JSON