CentOS Errata and Security Advisory CESA-2014:0206
OpenLDAP is an open source suite of Lightweight Directory Access Protocol
(LDAP) applications and development tools. LDAP is a set of protocols used
to access and maintain distributed directory information services over an
IP network. The openldap package contains configuration files, libraries,
and documentation for OpenLDAP.
A denial of service flaw was found in the way the OpenLDAP server daemon
(slapd) performed reference counting when using the rwm (rewrite/remap)
overlay. A remote attacker able to query the OpenLDAP server could use this
flaw to crash the server by immediately unbinding from the server after
sending a search request. (CVE-2013-4449)
Red Hat would like to thank Michael Vishchers from Seven Principles AG for
reporting this issue.
All openldap users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2014-February/082336.html
Affected packages:
compat-openldap
openldap
openldap-clients
openldap-devel
openldap-servers
openldap-servers-overlays
openldap-servers-sql
Upstream details at:
https://access.redhat.com/errata/RHSA-2014:0206
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 5 | i386 | compat-openldap | <Β 2.3.43_2.2.29-27.el5_10 | compat-openldap-2.3.43_2.2.29-27.el5_10.i386.rpm |
CentOS | 5 | i386 | openldap | <Β 2.3.43-27.el5_10 | openldap-2.3.43-27.el5_10.i386.rpm |
CentOS | 5 | i386 | openldap-clients | <Β 2.3.43-27.el5_10 | openldap-clients-2.3.43-27.el5_10.i386.rpm |
CentOS | 5 | i386 | openldap-devel | <Β 2.3.43-27.el5_10 | openldap-devel-2.3.43-27.el5_10.i386.rpm |
CentOS | 5 | i386 | openldap-servers | <Β 2.3.43-27.el5_10 | openldap-servers-2.3.43-27.el5_10.i386.rpm |
CentOS | 5 | i386 | openldap-servers-overlays | <Β 2.3.43-27.el5_10 | openldap-servers-overlays-2.3.43-27.el5_10.i386.rpm |
CentOS | 5 | i386 | openldap-servers-sql | <Β 2.3.43-27.el5_10 | openldap-servers-sql-2.3.43-27.el5_10.i386.rpm |
CentOS | 5 | i386 | compat-openldap | <Β 2.3.43_2.2.29-27.el5_10 | compat-openldap-2.3.43_2.2.29-27.el5_10.i386.rpm |
CentOS | 5 | x86_64 | compat-openldap | <Β 2.3.43_2.2.29-27.el5_10 | compat-openldap-2.3.43_2.2.29-27.el5_10.x86_64.rpm |
CentOS | 5 | i386 | openldap | <Β 2.3.43-27.el5_10 | openldap-2.3.43-27.el5_10.i386.rpm |