ELSA-2006-0719

ELSA-2006-0719 - Moderate nss_ldap security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2006-11-30

Description

[226-17]
- temporarily disable fixes for #190256 and #206438 for security update

[226-16]
- include backported fix for off-by-one crasher in various result parsing
functions (Carsten Clashom, #206438)

[226-15]
- don't suppress policy errors encountered during authentication if the
specific policy error isn't one which the PAM spec indicates should be
reported during account management (CVE-2006-5170, #207286, upstream #291)

[226-14]
- return PAM_NEW_AUTHTOK_REQD instead of PAM_PERM_DENIED in case of a
POLICY_ERROR_CHANGE_AFTER_RESET policy response from the server (#190256)

Related CVEs

CVE-2006-5170

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 4 (i386)	nss_ldap-226-17.src.rpm	940c50cc4f70aae3a2ba0ec6c0995170d15e4772aca12e361e184fe93fd5e5e8	ELBA-2011-0239	el4_i386_latest
	nss_ldap-226-17.src.rpm	940c50cc4f70aae3a2ba0ec6c0995170d15e4772aca12e361e184fe93fd5e5e8	ELBA-2011-0239	el4_u4_i386_patch
	nss_ldap-226-17.i386.rpm	899ac43449bacacd766f2b72d2ad7930567a8afa5d42dcdcc2157be4d6f132be	ELBA-2011-0239	el4_i386_latest
	nss_ldap-226-17.i386.rpm	899ac43449bacacd766f2b72d2ad7930567a8afa5d42dcdcc2157be4d6f132be	ELBA-2011-0239	el4_u4_i386_patch
Oracle Linux 4 (x86_64)	nss_ldap-226-17.src.rpm	940c50cc4f70aae3a2ba0ec6c0995170d15e4772aca12e361e184fe93fd5e5e8	ELBA-2011-0239	el4_u4_x86_64_patch
	nss_ldap-226-17.src.rpm	940c50cc4f70aae3a2ba0ec6c0995170d15e4772aca12e361e184fe93fd5e5e8	ELBA-2011-0239	el4_x86_64_latest
	nss_ldap-226-17.i386.rpm	899ac43449bacacd766f2b72d2ad7930567a8afa5d42dcdcc2157be4d6f132be	ELBA-2011-0239	el4_u4_x86_64_patch
	nss_ldap-226-17.i386.rpm	899ac43449bacacd766f2b72d2ad7930567a8afa5d42dcdcc2157be4d6f132be	ELBA-2011-0239	el4_x86_64_latest
	nss_ldap-226-17.x86_64.rpm	bf728c4b883c8753756d736f4b36f68d7602039df9cdfb21a69499ea80c9ab6c	ELBA-2011-0239	el4_u4_x86_64_patch
	nss_ldap-226-17.x86_64.rpm	bf728c4b883c8753756d736f4b36f68d7602039df9cdfb21a69499ea80c9ab6c	ELBA-2011-0239	el4_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team