[Pkg-openldap-devel] 2.4.7-5 away

[Russ Allbery]

Steve Langasek <vorlon at debian.org> writes:

> GnuTLS and OpenLDAP need to agree on the meaning of the "length"
> returned, so our patched libldap will again fail to validate alternate
> subject names when GnuTLS gets fixed.  Dunno whether you're counting
> that as "significant" harm. :)

Oh, okay.  For some reason I thought this was a case of just allocating an
extra byte of memory, but now that I think about it, it's obvious that I
understood.

> I would like to see the GnuTLS API fix reach Debian ASAP, so we can
> sidestep any concerns about partial upgrades to the fixed libgnutls.

Agreed.  Not that I have time to work on that.  *wry grin*

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>