Karsten Heymann wrote:
Should I just post it to the mailing list or do you prefer a non-public transmission first so the bug does not get exploited in a denial of service use case before you had the chance to come up with a fix?
If you feel an issue is very sensitive you can set radio button "Major Security Issue?" to "yes" when filing the bug report via [New Issue Report] here:
http://www.openldap.org/its/index.cgi
Ciao, Michael.