ELSA-2008-0715

ELSA-2008-0715 - nss_ldap security and bug fix update

Type:	SECURITY
Impact:	LOW
Release Date:	2008-08-01

Description

[253-5]
- build with strict-aliasing disabled, because pam_ldap breaks strict-aliasing
rules without it (tools)

[253-4]
- block SIGPIPE in the atfork handler, so that it doesnt trip up when
attempting to drop a connection to the server (#448833)

[253-3]
- add patch to make netgroup enumeration fail due to lack of entries in
setnetgrent(), rather than in getnetgrent(), to match how other mechanisms
work (Jose Plans, #253997)

[253-2]
- add fix for not double-freeing the result list when we try to initialize an
internal enumeration context while we have one active (#233382)

[253-1]
- rebase to nss_ldap 253 (#401731)
- fixes leftover lock problem in nss_initgroups_ignoreusers handling (#429101)
- fixes re-use of connections across fork() (#155187)

Related CVEs

CVE-2007-5794

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 4 (i386)	nss_ldap-253-5.el4.src.rpm	3383489fdce3d654c6dd62f75b2f229313b8bebac4bfbc902e3d5099c32409cd	ELBA-2011-0239	el4_i386_latest
	nss_ldap-253-5.el4.src.rpm	3383489fdce3d654c6dd62f75b2f229313b8bebac4bfbc902e3d5099c32409cd	ELBA-2011-0239	el4_u7_i386_base
	nss_ldap-253-5.el4.i386.rpm	abcbff396477bb59bf77e16ffd46e224b69205297613cc2161d434008b245ca0	ELBA-2011-0239	el4_i386_latest
	nss_ldap-253-5.el4.i386.rpm	abcbff396477bb59bf77e16ffd46e224b69205297613cc2161d434008b245ca0	ELBA-2011-0239	el4_u7_i386_base
Oracle Linux 4 (ia64)	nss_ldap-253-5.el4.src.rpm	3383489fdce3d654c6dd62f75b2f229313b8bebac4bfbc902e3d5099c32409cd	ELBA-2011-0239	el4_ia64_latest
	nss_ldap-253-5.el4.src.rpm	3383489fdce3d654c6dd62f75b2f229313b8bebac4bfbc902e3d5099c32409cd	ELBA-2011-0239	el4_u7_ia64_base
	nss_ldap-253-5.el4.i386.rpm	abcbff396477bb59bf77e16ffd46e224b69205297613cc2161d434008b245ca0	ELBA-2011-0239	el4_ia64_latest
	nss_ldap-253-5.el4.i386.rpm	abcbff396477bb59bf77e16ffd46e224b69205297613cc2161d434008b245ca0	ELBA-2011-0239	el4_u7_ia64_base
	nss_ldap-253-5.el4.ia64.rpm	0f5b4b6d88e483dc5a0c9f9ac5e6ae44bbd531686e8354589afda31548046ecd	ELBA-2011-0239	el4_ia64_latest
	nss_ldap-253-5.el4.ia64.rpm	0f5b4b6d88e483dc5a0c9f9ac5e6ae44bbd531686e8354589afda31548046ecd	ELBA-2011-0239	el4_u7_ia64_base
Oracle Linux 4 (x86_64)	nss_ldap-253-5.el4.src.rpm	3383489fdce3d654c6dd62f75b2f229313b8bebac4bfbc902e3d5099c32409cd	ELBA-2011-0239	el4_u7_x86_64_base
	nss_ldap-253-5.el4.src.rpm	3383489fdce3d654c6dd62f75b2f229313b8bebac4bfbc902e3d5099c32409cd	ELBA-2011-0239	el4_x86_64_latest
	nss_ldap-253-5.el4.i386.rpm	abcbff396477bb59bf77e16ffd46e224b69205297613cc2161d434008b245ca0	ELBA-2011-0239	el4_u7_x86_64_base
	nss_ldap-253-5.el4.i386.rpm	abcbff396477bb59bf77e16ffd46e224b69205297613cc2161d434008b245ca0	ELBA-2011-0239	el4_x86_64_latest
	nss_ldap-253-5.el4.x86_64.rpm	b76ddf6f57db2b89d9db9d35984bce5155698f53cf40943c56f6150d11ac5458	ELBA-2011-0239	el4_u7_x86_64_base
	nss_ldap-253-5.el4.x86_64.rpm	b76ddf6f57db2b89d9db9d35984bce5155698f53cf40943c56f6150d11ac5458	ELBA-2011-0239	el4_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team