Scientific Linux: Moderate OpenLDAP Security Update for SL5.x

Date: Tue, 20 Jul 2010 14:26:41 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: FASTBUGS for SL 5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

The following FASTBUGS have been uploaded to

 i386:
db4-4.3.29-10.el5_5.2.i386.rpm
db4-devel-4.3.29-10.el5_5.2.i386.rpm
db4-java-4.3.29-10.el5_5.2.i386.rpm
db4-tcl-4.3.29-10.el5_5.2.i386.rpm
db4-utils-4.3.29-10.el5_5.2.i386.rpm
device-mapper-multipath-0.4.7-34.el5_5.4.i386.rpm
gnupg-1.4.5-14.el5_5.1.i386.rpm
kpartx-0.4.7-34.el5_5.4.i386.rpm
libbdevid-python-5.1.19.6-61.el5_5.2.i386.rpm
lvm2-2.02.56-8.el5_5.5.i386.rpm
mkinitrd-5.1.19.6-61.el5_5.2.i386.rpm
mkinitrd-devel-5.1.19.6-61.el5_5.2.i386.rpm
nash-5.1.19.6-61.el5_5.2.i386.rpm
xen-3.0.3-105.el5_5.4.i386.rpm
xen-devel-3.0.3-105.el5_5.4.i386.rpm
xen-libs-3.0.3-105.el5_5.4.i386.rpm
yum-aliases-1.1.16-13.sl5.1.noarch.rpm
yum-allowdowngrade-1.1.16-13.sl5.1.noarch.rpm
yum-changelog-1.1.16-13.sl5.1.noarch.rpm
yum-downloadonly-1.1.16-13.sl5.1.noarch.rpm
yum-fastestmirror-1.1.16-13.sl5.1.noarch.rpm
yum-filter-data-1.1.16-13.sl5.1.noarch.rpm
yum-kernel-module-1.1.16-13.sl5.1.noarch.rpm
yum-keys-1.1.16-13.sl5.1.noarch.rpm
yum-kmod-1.1.16-13.sl5.1.noarch.rpm
yum-list-data-1.1.16-13.sl5.1.noarch.rpm
yum-merge-conf-1.1.16-13.sl5.1.noarch.rpm
yum-NetworkManager-dispatcher-1.1.16-13.sl5.1.noarch.rpm
yum-priorities-1.1.16-13.sl5.1.noarch.rpm
yum-protectbase-1.1.16-13.sl5.1.noarch.rpm
yum-protect-packages-1.1.16-13.sl5.1.noarch.rpm
yum-refresh-updatesd-1.1.16-13.sl5.1.noarch.rpm
yum-security-1.1.16-13.sl5.1.noarch.rpm
yum-tmprepo-1.1.16-13.sl5.1.noarch.rpm
yum-tsflags-1.1.16-13.sl5.1.noarch.rpm
yum-updateonboot-1.1.16-13.sl5.1.noarch.rpm
yum-upgrade-helper-1.1.16-13.sl5.1.noarch.rpm
yum-utils-1.1.16-13.sl5.1.noarch.rpm
yum-verify-1.1.16-13.sl5.1.noarch.rpm
yum-versionlock-1.1.16-13.sl5.1.noarch.rpm

 x86_64:
db4-4.3.29-10.el5_5.2.i386.rpm
db4-4.3.29-10.el5_5.2.x86_64.rpm
db4-devel-4.3.29-10.el5_5.2.i386.rpm
db4-devel-4.3.29-10.el5_5.2.x86_64.rpm
db4-java-4.3.29-10.el5_5.2.x86_64.rpm
db4-tcl-4.3.29-10.el5_5.2.x86_64.rpm
db4-utils-4.3.29-10.el5_5.2.x86_64.rpm
device-mapper-multipath-0.4.7-34.el5_5.4.x86_64.rpm
gnupg-1.4.5-14.el5_5.1.x86_64.rpm
kpartx-0.4.7-34.el5_5.4.x86_64.rpm
libbdevid-python-5.1.19.6-61.el5_5.2.x86_64.rpm
lvm2-2.02.56-8.el5_5.5.x86_64.rpm
mkinitrd-5.1.19.6-61.el5_5.2.i386.rpm
mkinitrd-5.1.19.6-61.el5_5.2.x86_64.rpm
mkinitrd-devel-5.1.19.6-61.el5_5.2.i386.rpm
mkinitrd-devel-5.1.19.6-61.el5_5.2.x86_64.rpm
nash-5.1.19.6-61.el5_5.2.x86_64.rpm
xen-3.0.3-105.el5_5.4.x86_64.rpm
xen-devel-3.0.3-105.el5_5.4.i386.rpm
xen-devel-3.0.3-105.el5_5.4.x86_64.rpm
xen-libs-3.0.3-105.el5_5.4.i386.rpm
xen-libs-3.0.3-105.el5_5.4.x86_64.rpm
yum-aliases-1.1.16-13.sl5.1.noarch.rpm
yum-allowdowngrade-1.1.16-13.sl5.1.noarch.rpm
yum-changelog-1.1.16-13.sl5.1.noarch.rpm
yum-downloadonly-1.1.16-13.sl5.1.noarch.rpm
yum-fastestmirror-1.1.16-13.sl5.1.noarch.rpm
yum-filter-data-1.1.16-13.sl5.1.noarch.rpm
yum-kernel-module-1.1.16-13.sl5.1.noarch.rpm
yum-keys-1.1.16-13.sl5.1.noarch.rpm
yum-kmod-1.1.16-13.sl5.1.noarch.rpm
yum-list-data-1.1.16-13.sl5.1.noarch.rpm
yum-merge-conf-1.1.16-13.sl5.1.noarch.rpm
yum-NetworkManager-dispatcher-1.1.16-13.sl5.1.noarch.rpm
yum-priorities-1.1.16-13.sl5.1.noarch.rpm
yum-protectbase-1.1.16-13.sl5.1.noarch.rpm
yum-protect-packages-1.1.16-13.sl5.1.noarch.rpm
yum-refresh-updatesd-1.1.16-13.sl5.1.noarch.rpm
yum-security-1.1.16-13.sl5.1.noarch.rpm
yum-tmprepo-1.1.16-13.sl5.1.noarch.rpm
yum-tsflags-1.1.16-13.sl5.1.noarch.rpm
yum-updateonboot-1.1.16-13.sl5.1.noarch.rpm
yum-upgrade-helper-1.1.16-13.sl5.1.noarch.rpm
yum-utils-1.1.16-13.sl5.1.noarch.rpm
yum-verify-1.1.16-13.sl5.1.noarch.rpm
yum-versionlock-1.1.16-13.sl5.1.noarch.rpm

-Connie Sieh
-Troy Dawson
Date: Tue, 20 Jul 2010 14:31:35 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA Moderate: openldap on SL5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Moderate: openldap security update
Issue date:	2010-07-20
CVE Names:	CVE-2010-0211 CVE-2010-0212

Multiple flaws were discovered in the way the slapd daemon handled
modify relative distinguished name (modrdn) requests. An authenticated
user with privileges to perform modrdn operations could use these flaws
to crash the slapd daemon via specially-crafted modrdn requests.
(CVE-2010-0211, CVE-2010-0212)

After installing this update, the OpenLDAP daemons will be restarted
automatically.

SL 5.x

 SRPMS:
openldap-2.3.43-12.el5_5.1.src.rpm
 i386:
compat-openldap-2.3.43_2.2.29-12.el5_5.1.i386.rpm
openldap-2.3.43-12.el5_5.1.i386.rpm
openldap-clients-2.3.43-12.el5_5.1.i386.rpm
openldap-devel-2.3.43-12.el5_5.1.i386.rpm
openldap-servers-2.3.43-12.el5_5.1.i386.rpm
openldap-servers-overlays-2.3.43-12.el5_5.1.i386.rpm
openldap-servers-sql-2.3.43-12.el5_5.1.i386.rpm

 x86_64:
compat-openldap-2.3.43_2.2.29-12.el5_5.1.i386.rpm
compat-openldap-2.3.43_2.2.29-12.el5_5.1.x86_64.rpm
openldap-2.3.43-12.el5_5.1.i386.rpm
openldap-2.3.43-12.el5_5.1.x86_64.rpm
openldap-clients-2.3.43-12.el5_5.1.x86_64.rpm
openldap-devel-2.3.43-12.el5_5.1.i386.rpm
openldap-devel-2.3.43-12.el5_5.1.x86_64.rpm
openldap-servers-2.3.43-12.el5_5.1.x86_64.rpm
openldap-servers-overlays-2.3.43-12.el5_5.1.x86_64.rpm
openldap-servers-sql-2.3.43-12.el5_5.1.x86_64.rpm

-Connie Sieh
-Troy Dawson