Thanks for your guidance on this. I've attached a new debdiff with the minimal patch. I would have liked to incorporate the poll() changes, but it makes sense to do the minimum to fix this bug for now.
Patch was applied from http://arthurdejong.org/git/nss-pam- ldapd/commit/?id=7867b93f9a7c76b96f1571cddc1de0811134bb81 , it did not apply completely as it patches tio_skipall, which had not been introduced in the version currently in precise. ** Patch added: "nss-pam-ldapd.debdiff" https://bugs.launchpad.net/ubuntu/+source/nss-pam-ldapd/+bug/1347614/+attachment/4165052/+files/nss-pam-ldapd.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347614 Title: Fix for CVE-2013-0288 in precise package To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nss-pam-ldapd/+bug/1347614/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs