ELSA-2012-0899

ELSA-2012-0899 - openldap security and bug fix update

Type:	SECURITY
Impact:	LOW
Release Date:	2012-06-27

Description

[2.4.23-26]
- fix: MozNSS CA cert dir does not work together with PEM CA cert file (#818844)
- fix: memory leak: def_urlpre is not freed (#816168)
- fix update: Default SSL certificate bundle is not found by openldap library (#742023)

[2.4.23-25]
- fix update: Default SSL certificate bundle is not found by openldap library (#742023)

[2.4.23-24]
- fix update: Default SSL certificate bundle is not found by openldap library (#742023)
- fix: memberof overlay on the frontend database causes server segfault (#730745)

[2.4.23-23]
- security fix: CVE-2012-1164: assertion failure by processing search queries
requesting only attributes for particular entry (#813162)

[2.4.23-22]
- fix: libraries leak memory when following referrals (#807363)

[2.4.23-21]
- fix: ldapsearch crashes with invalid parameters (#743781)
- fix: replication (syncrepl) with TLS causes segfault (#783445)
- fix: openldap server in MirrorMode sometimes fails to resync via syncrepl (#784211)
- use portreserve to reserve LDAPS port (636/tcp+udp) (#790687)
- fix: missing options in manual pages of client tools (#745470)
- fix: SASL_NOCANON option missing in ldap.conf manual page (#732916)
- fix: slapd segfaults when certificate key cannot be loaded (#796808)
- Jan Synacek
+ fix: overlay constraint with count option work bad with modify operation (#742163)
+ fix: Default SSL certificate bundle is not found by openldap library (#742023)
+ fix: Duplicate close() calls in OpenLDAP (#784203)

Related CVEs

CVE-2012-1164

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	openldap-2.4.23-26.el6.src.rpm	1633da619823d14f384da4741a9345dbc60fb2ead9be09af9240bed8832bb69c	ELBA-2017-0664	ol6_i386_latest_archive
	openldap-2.4.23-26.el6.src.rpm	1633da619823d14f384da4741a9345dbc60fb2ead9be09af9240bed8832bb69c	ELBA-2017-0664	ol6_u3_i386_base
	openldap-2.4.23-26.el6.i686.rpm	cd6f54ff26bddc6deb96979a9d7c1a3b0faa9a7eacf7a52045e65210dec5dc09	ELBA-2017-0664	ol6_i386_latest_archive
	openldap-2.4.23-26.el6.i686.rpm	cd6f54ff26bddc6deb96979a9d7c1a3b0faa9a7eacf7a52045e65210dec5dc09	ELBA-2017-0664	ol6_u3_i386_base
	openldap-clients-2.4.23-26.el6.i686.rpm	d83c3f3bef3caa73a93da12588f9275e1c6b0db1e856a3321b16c995fc42c1b5	ELBA-2017-0664	ol6_i386_latest_archive
	openldap-clients-2.4.23-26.el6.i686.rpm	d83c3f3bef3caa73a93da12588f9275e1c6b0db1e856a3321b16c995fc42c1b5	ELBA-2017-0664	ol6_u3_i386_base
	openldap-devel-2.4.23-26.el6.i686.rpm	e0c66ee0ebc4c465aa4821c4a48a4361b3149b86191aeb7f67bc149c326716c0	ELBA-2017-0664	ol6_i386_latest_archive
	openldap-devel-2.4.23-26.el6.i686.rpm	e0c66ee0ebc4c465aa4821c4a48a4361b3149b86191aeb7f67bc149c326716c0	ELBA-2017-0664	ol6_u3_i386_base
	openldap-servers-2.4.23-26.el6.i686.rpm	64aedb48d5bd6f4540082c2825896455bdc930980078685f83486f1fc6336729	ELBA-2017-0664	ol6_i386_latest_archive
	openldap-servers-2.4.23-26.el6.i686.rpm	64aedb48d5bd6f4540082c2825896455bdc930980078685f83486f1fc6336729	ELBA-2017-0664	ol6_u3_i386_base
	openldap-servers-sql-2.4.23-26.el6.i686.rpm	9c657324e9d9298349ccd9d8ccabcbe190376574eb9a70130e91da8a9b4513e7	ELBA-2017-0664	ol6_i386_latest_archive
	openldap-servers-sql-2.4.23-26.el6.i686.rpm	9c657324e9d9298349ccd9d8ccabcbe190376574eb9a70130e91da8a9b4513e7	ELBA-2017-0664	ol6_u3_i386_base
Oracle Linux 6 (x86_64)	openldap-2.4.23-26.el6.src.rpm	1633da619823d14f384da4741a9345dbc60fb2ead9be09af9240bed8832bb69c	ELBA-2017-0664	ol6_u3_x86_64_base
	openldap-2.4.23-26.el6.src.rpm	1633da619823d14f384da4741a9345dbc60fb2ead9be09af9240bed8832bb69c	ELBA-2017-0664	ol6_x86_64_latest_archive
	openldap-2.4.23-26.el6.i686.rpm	cd6f54ff26bddc6deb96979a9d7c1a3b0faa9a7eacf7a52045e65210dec5dc09	ELBA-2017-0664	ol6_u3_x86_64_base
	openldap-2.4.23-26.el6.i686.rpm	cd6f54ff26bddc6deb96979a9d7c1a3b0faa9a7eacf7a52045e65210dec5dc09	ELBA-2017-0664	ol6_x86_64_latest_archive
	openldap-2.4.23-26.el6.x86_64.rpm	dbd9e5e359f61f10736e4fe300bfbfaecbd045b57631d7640f7e64f8f6d600b7	ELBA-2017-0664	ol6_u3_x86_64_base
	openldap-2.4.23-26.el6.x86_64.rpm	dbd9e5e359f61f10736e4fe300bfbfaecbd045b57631d7640f7e64f8f6d600b7	ELBA-2017-0664	ol6_x86_64_latest_archive
	openldap-clients-2.4.23-26.el6.x86_64.rpm	3d3ce838a92467bcfd4ffe7fb757f0d8cc0f189dfb933766f18bb5292506f992	ELBA-2017-0664	ol6_u3_x86_64_base
	openldap-clients-2.4.23-26.el6.x86_64.rpm	3d3ce838a92467bcfd4ffe7fb757f0d8cc0f189dfb933766f18bb5292506f992	ELBA-2017-0664	ol6_x86_64_latest_archive
	openldap-devel-2.4.23-26.el6.i686.rpm	e0c66ee0ebc4c465aa4821c4a48a4361b3149b86191aeb7f67bc149c326716c0	ELBA-2017-0664	ol6_u3_x86_64_base
	openldap-devel-2.4.23-26.el6.i686.rpm	e0c66ee0ebc4c465aa4821c4a48a4361b3149b86191aeb7f67bc149c326716c0	ELBA-2017-0664	ol6_x86_64_latest_archive
	openldap-devel-2.4.23-26.el6.x86_64.rpm	6efba217608769dbd95020316cf21ec7fd291ef3092a88587e27708ee9336f74	ELBA-2017-0664	ol6_u3_x86_64_base
	openldap-devel-2.4.23-26.el6.x86_64.rpm	6efba217608769dbd95020316cf21ec7fd291ef3092a88587e27708ee9336f74	ELBA-2017-0664	ol6_x86_64_latest_archive
	openldap-servers-2.4.23-26.el6.x86_64.rpm	3f8c6a1b0ba5cb604f560b124b03e7f31e18fe24dd0c678765b41271b791fba1	ELBA-2017-0664	ol6_u3_x86_64_base
	openldap-servers-2.4.23-26.el6.x86_64.rpm	3f8c6a1b0ba5cb604f560b124b03e7f31e18fe24dd0c678765b41271b791fba1	ELBA-2017-0664	ol6_x86_64_latest_archive
	openldap-servers-sql-2.4.23-26.el6.x86_64.rpm	d001c5eb4898369541f8ac5c97bd296ce84777d7f8cb151fe2ce2ebe9fc593cd	ELBA-2017-0664	ol6_u3_x86_64_base
	openldap-servers-sql-2.4.23-26.el6.x86_64.rpm	d001c5eb4898369541f8ac5c97bd296ce84777d7f8cb151fe2ce2ebe9fc593cd	ELBA-2017-0664	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team