(RHSA-2007:1038) Moderate: openldap security and enhancement update

2007-11-1500:00:00

access.redhat.com

EPSS

0.038

Percentile

92.0%

JSON

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access
Protocol) applications and development tools.

A flaw was found in the way OpenLDAP’s slapd daemon handled malformed
objectClasses LDAP attributes. An authenticated local or remote attacker
could create an LDAP request which could cause a denial of service by
crashing slapd. (CVE-2007-5707)

In addition, the following feature was added:

OpenLDAP client tools now have new option to configure their bind timeout.

All users are advised to upgrade to these updated openldap packages, which
contain a backported patch to correct this issue and provide this security
enhancement.

OSVersionArchitecturePackageVersionFilename
RedHat4s390xopenldap-devel< 2.2.13-8.el4_6.1openldap-devel-2.2.13-8.el4_6.1.s390x.rpm
RedHat4ia64openldap< 2.2.13-8.el4_6.1openldap-2.2.13-8.el4_6.1.ia64.rpm
RedHat4i386openldap-servers-sql< 2.2.13-8.el4_6.1openldap-servers-sql-2.2.13-8.el4_6.1.i386.rpm
RedHat4x86_64openldap-clients< 2.2.13-8.el4_6.1openldap-clients-2.2.13-8.el4_6.1.x86_64.rpm
RedHat4ppc64openldap< 2.2.13-8.el4_6.1openldap-2.2.13-8.el4_6.1.ppc64.rpm
RedHat4s390xopenldap-clients< 2.2.13-8.el4_6.1openldap-clients-2.2.13-8.el4_6.1.s390x.rpm
RedHat4srcopenldap< 2.2.13-8.el4_6.1openldap-2.2.13-8.el4_6.1.src.rpm
RedHat4x86_64compat-openldap< 2.1.30-8.el4_6.1compat-openldap-2.1.30-8.el4_6.1.x86_64.rpm
RedHat4s390openldap< 2.2.13-8.el4_6.1openldap-2.2.13-8.el4_6.1.s390.rpm
RedHat4ia64openldap-clients< 2.2.13-8.el4_6.1openldap-clients-2.2.13-8.el4_6.1.ia64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	4	s390x	openldap-devel	< 2.2.13-8.el4_6.1	openldap-devel-2.2.13-8.el4_6.1.s390x.rpm
RedHat	4	ia64	openldap	< 2.2.13-8.el4_6.1	openldap-2.2.13-8.el4_6.1.ia64.rpm
RedHat	4	i386	openldap-servers-sql	< 2.2.13-8.el4_6.1	openldap-servers-sql-2.2.13-8.el4_6.1.i386.rpm
RedHat	4	x86_64	openldap-clients	< 2.2.13-8.el4_6.1	openldap-clients-2.2.13-8.el4_6.1.x86_64.rpm
RedHat	4	ppc64	openldap	< 2.2.13-8.el4_6.1	openldap-2.2.13-8.el4_6.1.ppc64.rpm
RedHat	4	s390x	openldap-clients	< 2.2.13-8.el4_6.1	openldap-clients-2.2.13-8.el4_6.1.s390x.rpm
RedHat	4	src	openldap	< 2.2.13-8.el4_6.1	openldap-2.2.13-8.el4_6.1.src.rpm
RedHat	4	x86_64	compat-openldap	< 2.1.30-8.el4_6.1	compat-openldap-2.1.30-8.el4_6.1.x86_64.rpm
RedHat	4	s390	openldap	< 2.2.13-8.el4_6.1	openldap-2.2.13-8.el4_6.1.s390.rpm
RedHat	4	ia64	openldap-clients	< 2.2.13-8.el4_6.1	openldap-clients-2.2.13-8.el4_6.1.ia64.rpm