OVMSA-2016-0069

OVMSA-2016-0069 - openldap security update

Type:SECURITY
Severity:NA
Release Date:2016-06-20

Description


[2.3.43-29]
- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263170)

[2.3.43-28]
- fix: syncprov psearch race condition (#999811)

[2.3.43-27]
- fix: CVE-2013-4449 segfault on certain queries with rwm overlay (#1064146)

[2.3.43-26]
- fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#812772)

[2.3.43-25]
- fix: disable static libraries stripping (#684630)

[2.3.43-24]
- fix: memory leaks in syncrepl and slap_sl_free (#741184)

[2.3.43-23]
- new feature update: honor priority/weight with ldap_domain2hostlist (#733435)
- fix: initscript marked as %config incorrectly (#738768)

[2.3.43-22]
- new feature: honor priority/weight with ldap_domain2hostlist (#733435)

[2.3.43-21]
- fix: strict aliasing warnings during package build (#732381)

[2.3.43-20]
- fix: OpenLDAP packages lack debug data (#684630)
- doc: Document preferred use of TLS_CACERT instead of TLS_CACERTDIR to specify Certificate Authorities (#699652)
- fix: libldap ignores a directory of CA certificates if any of them can't be read (#609722)
- fix: Migration: migrate_all_offline.sh can't handle duplicate entries (#563148)
- fix: Init script is working wrong if database recovery is needed (#604092)

[2.3.43-19]
- fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success (#680486)

[2.3.43-18]
- fix: slapd concurrent access to connections causes slapd to silently die (#641953)

[2.3.43-17]
- backport: ldap_init_fd() API function

[2.3.43-16]
- fix: ppolicy crash while replace-deleting userPassword attribute (#665951)

[2.3.43-15]
- fix: connection freeze when using TLS (#591419)

[2.3.43-14]
- don't remove task twice during replication

[2.3.43-13]
- fixed segfault issues in modrdn (#606375)
- added patch handling null char in TLS to compat package
(#606375, patch backported by Jan Vcelak )


Related CVEs


CVE-2013-4449
CVE-2015-6908

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle VM 3.2 (x86_64) openldap-2.3.43-29.el5_11.src.rpm778f24e49b3ec056fe6dda0afeab953fOVMBA-2018-0141
openldap-2.3.43-29.el5_11.x86_64.rpm65b40cab5eea2439b0494f8556f4b8eaOVMBA-2018-0141
openldap-clients-2.3.43-29.el5_11.x86_64.rpm87a770d5c90b93ba2597ea01642a6084OVMBA-2018-0141



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete