Scientific Linux: SLSA-2015:1840-1 Critical: OpenLDAP Remote Crash Risk

Date: Tue, 29 Sep 2015 13:52:16 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Important: openldap on SL5.x, SL6.x,
 SL7.x i386/x86_64
MIME-Version: 1.0
Message-ID: <20150929135216.5108.48941@slpackages.fnal.gov>

Synopsis: Important: openldap security update
Advisory ID: SLSA-2015:1840-1
Issue Date: 2015-09-29
CVE Numbers: CVE-2015-6908
--

A flaw was found in the way the OpenLDAP server daemon (slapd) parsed
certain Basic Encoding Rules (BER) data. A remote attacker could use this
flaw to crash slapd via a specially crafted packet. (CVE-2015-6908)
--

SL5
 x86_64
 compat-openldap-2.3.43_2.2.29-29.el5_11.i386.rpm
 compat-openldap-2.3.43_2.2.29-29.el5_11.x86_64.rpm
 openldap-2.3.43-29.el5_11.i386.rpm
 openldap-2.3.43-29.el5_11.x86_64.rpm
 openldap-clients-2.3.43-29.el5_11.x86_64.rpm
 openldap-debuginfo-2.3.43-29.el5_11.i386.rpm
 openldap-debuginfo-2.3.43-29.el5_11.x86_64.rpm
 openldap-devel-2.3.43-29.el5_11.i386.rpm
 openldap-devel-2.3.43-29.el5_11.x86_64.rpm
 openldap-servers-2.3.43-29.el5_11.x86_64.rpm
 openldap-servers-overlays-2.3.43-29.el5_11.x86_64.rpm
 openldap-servers-sql-2.3.43-29.el5_11.x86_64.rpm
 i386
 compat-openldap-2.3.43_2.2.29-29.el5_11.i386.rpm
 openldap-2.3.43-29.el5_11.i386.rpm
 openldap-clients-2.3.43-29.el5_11.i386.rpm
 openldap-debuginfo-2.3.43-29.el5_11.i386.rpm
 openldap-devel-2.3.43-29.el5_11.i386.rpm
 openldap-servers-2.3.43-29.el5_11.i386.rpm
 openldap-servers-overlays-2.3.43-29.el5_11.i386.rpm
 openldap-servers-sql-2.3.43-29.el5_11.i386.rpm
SL6
 x86_64
 openldap-2.4.40-6.el6_7.i686.rpm
 openldap-2.4.40-6.el6_7.x86_64.rpm
 openldap-clients-2.4.40-6.el6_7.x86_64.rpm
 openldap-debuginfo-2.4.40-6.el6_7.i686.rpm
 openldap-debuginfo-2.4.40-6.el6_7.x86_64.rpm
 openldap-devel-2.4.40-6.el6_7.i686.rpm
 openldap-devel-2.4.40-6.el6_7.x86_64.rpm
 openldap-servers-2.4.40-6.el6_7.x86_64.rpm
 openldap-servers-sql-2.4.40-6.el6_7.x86_64.rpm
 i386
 openldap-2.4.40-6.el6_7.i686.rpm
 openldap-clients-2.4.40-6.el6_7.i686.rpm
 openldap-debuginfo-2.4.40-6.el6_7.i686.rpm
 openldap-devel-2.4.40-6.el6_7.i686.rpm
 openldap-servers-2.4.40-6.el6_7.i686.rpm
 openldap-servers-sql-2.4.40-6.el6_7.i686.rpm
SL7
 x86_64
 openldap-2.4.39-7.el7_1.i686.rpm
 openldap-2.4.39-7.el7_1.x86_64.rpm
 openldap-clients-2.4.39-7.el7_1.x86_64.rpm
 openldap-debuginfo-2.4.39-7.el7_1.i686.rpm
 openldap-debuginfo-2.4.39-7.el7_1.x86_64.rpm
 openldap-devel-2.4.39-7.el7_1.i686.rpm
 openldap-devel-2.4.39-7.el7_1.x86_64.rpm
 openldap-servers-2.4.39-7.el7_1.x86_64.rpm
 openldap-servers-sql-2.4.39-7.el7_1.x86_64.rpm

- Scientific Linux Development Team
lastline