Linux · 
Ubuntu · Package update · January 16, 2026
Ubuntu · Package update · January 16, 2026slapd 2.4.57+dfsg-2ubuntu1: slapd 2.4.57+dfsg-2ubuntu1 for Ubuntu 25.04 (plucky)
slapd 2.4.57+dfsg-2ubuntu1, released January 16, 2026, fixes 11 CVEs in slapd. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.
RoutineUnsupported product
CVEs closed
11
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.8499
99th percentile
Priority of the 11 CVEs
Patch now 0
Urgent 0
High 0
Routine 11
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| slapd | Ubuntu 25.04 (plucky) | 2.4.57+dfsg-2ubuntu1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Routine | CVE-2020-36221 | libldap2: An integer underflow was discovered in OpenLDAP before 2.4.57 leading toslapd crashes in the Certificate Exact Assert... | n/a | 0.8499 | None reported |
| Routine | CVE-2020-36228 | ldap-utils: An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact... | n/a | 0.8499 | None reported |
| Routine | CVE-2020-36222 | slapd-contrib: A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertionfailure in slapd in the saslAuthzTo validation... | n/a | 0.7724 | None reported |
| Routine | CVE-2020-36227 | ldap-utils: A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel ope... | n/a | 0.7724 | None reported |
| Routine | CVE-2021-27212 | libldap2: In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertionfailure in slapd can occur in the issuerAndThisU... | n/a | 0.6611 | None reported |
| Routine | CVE-2020-36230 | ldap-utils: A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertionfailure in slapd in the X.509 DN parsing in de... | n/a | 0.1211 | None reported |
| Routine | CVE-2020-36224 | ldap-utils: A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalidpointer free and slapd crash in the saslAuthzTo... | n/a | 0.0435 | None reported |
| Routine | CVE-2020-36225 | ldap-utils: A flaw was discovered in OpenLDAP before 2.4.57 leading to a double freeand slapd crash in the saslAuthzTo processing... | n/a | 0.0435 | None reported |
| Routine | CVE-2020-36229 | ldap-utils: A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leadingto a slapd crash in the X.509 DN parsing in... | n/a | 0.0435 | None reported |
| Routine | CVE-2020-36223 | ldap-utils: A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash inthe Values Return Filter control handling,... | n/a | 0.0424 | None reported |
| Routine | CVE-2020-36226 | ldap-utils: A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_lenmiscalculation and slapd crash in the saslA... | n/a | 0.0424 | None reported |
Showing 1 to 11 of 11
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.