CHANGES

@@ -4,7 +4,7 @@ OpenLDAP 2.4.57 Engineering
 	Fixed ldapexop to use correct return code (ITS#9417)
 	Fixed slapd to remove asserts in UUIDNormalize (ITS#9391)
 	Fixed slapd to remove assert in csnValidate (ITS#9410)
-	Fixed slapd validity checks for issuerAndThisUpdateCheck (ITS#9411)
+	Fixed slapd validity checks for issuerAndThisUpdateCheck (ITS#9411, ITS#9427)
 	Fixed slapd validity checks for serialNumberAndIssuerCheck (ITS#9404, ITS#9424)
 	Fixed slapd AVA sort with invalid RDN (ITS#9412)
 	Fixed slapd ldap_X509dn2bv to check for invalid BER after RDN count (ITS#9423, ITS#9425)

servers/slapd/schema_init.c

@@ -3809,7 +3809,7 @@ issuerAndThisUpdateCheck(
 
 	if ( in->bv_len < STRLENOF( "{issuer \"\",thisUpdate \"YYMMDDhhmmssZ\"}" ) ) return LDAP_INVALID_SYNTAX;
 
-	if ( in->bv_val[0] != '{' && in->bv_val[in->bv_len-1] != '}' ) {
+	if ( in->bv_val[0] != '{' || in->bv_val[in->bv_len-1] != '}' ) {
 		return LDAP_INVALID_SYNTAX;
 	}