Debian/python-ldap: medium 5.3
python-ldap is a lightweight directory access protocol (LDAP) client API for Python. In versions prior to 3.4.5, ldap.dn.escape_dn_chars() escapes \x00 incorrectly by emitting a backslash followed by
Action: Upgrade python-ldap to 3.4.4-1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.4.4-1+deb13u1 | - |
Fixed versions
| 3.4.4-1+deb13u1 |
Sources
- osv: DEBIAN-CVE-2025-61912#Debian:13/python-ldap
- https://security-tracker.debian.org/tracker/CVE-2025-61912
published · modified · JSON