openldap security, bug fix, and enhancement update

2017-08-0700:00:00

linux.oracle.com

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.915 High

EPSS

Percentile

98.6%

JSON

[2.4.44-5]

fix CVE-2017-9287 openldap: Double free vulnerability in servers/slapd/back-mdb/search.c (#1458210)
[2.4.44-4]
NSS: Include some CHACHA20POLY1305 ciphers (#1432907)
[2.4.44-3]
NSS: re-register NSS_Shutdown callback (#1405354)
[2.4.44-2]
Include MDB tools in openldap-servers (#1428740)
[2.4.44-1]
Rebase to openldap-2.4.44 (#1386365)

OSVersionArchitecturePackageVersionFilename
oracle linux7srcopenldap< 2.4.44-5.el7openldap-2.4.44-5.el7.src.rpm
oracle linux7aarch64openldap< 2.4.44-5.el7openldap-2.4.44-5.el7.aarch64.rpm
oracle linux7aarch64openldap-clients< 2.4.44-5.el7openldap-clients-2.4.44-5.el7.aarch64.rpm
oracle linux7aarch64openldap-devel< 2.4.44-5.el7openldap-devel-2.4.44-5.el7.aarch64.rpm
oracle linux7aarch64openldap-servers< 2.4.44-5.el7openldap-servers-2.4.44-5.el7.aarch64.rpm
oracle linux7aarch64openldap-servers-sql< 2.4.44-5.el7openldap-servers-sql-2.4.44-5.el7.aarch64.rpm
oracle linux7srcopenldap< 2.4.44-5.el7openldap-2.4.44-5.el7.src.rpm
oracle linux7i686openldap< 2.4.44-5.el7openldap-2.4.44-5.el7.i686.rpm
oracle linux7x86_64openldap< 2.4.44-5.el7openldap-2.4.44-5.el7.x86_64.rpm
oracle linux7x86_64openldap-clients< 2.4.44-5.el7openldap-clients-2.4.44-5.el7.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	7	src	openldap	< 2.4.44-5.el7	openldap-2.4.44-5.el7.src.rpm
oracle linux	7	aarch64	openldap	< 2.4.44-5.el7	openldap-2.4.44-5.el7.aarch64.rpm
oracle linux	7	aarch64	openldap-clients	< 2.4.44-5.el7	openldap-clients-2.4.44-5.el7.aarch64.rpm
oracle linux	7	aarch64	openldap-devel	< 2.4.44-5.el7	openldap-devel-2.4.44-5.el7.aarch64.rpm
oracle linux	7	aarch64	openldap-servers	< 2.4.44-5.el7	openldap-servers-2.4.44-5.el7.aarch64.rpm
oracle linux	7	aarch64	openldap-servers-sql	< 2.4.44-5.el7	openldap-servers-sql-2.4.44-5.el7.aarch64.rpm
oracle linux	7	src	openldap	< 2.4.44-5.el7	openldap-2.4.44-5.el7.src.rpm
oracle linux	7	i686	openldap	< 2.4.44-5.el7	openldap-2.4.44-5.el7.i686.rpm
oracle linux	7	x86_64	openldap	< 2.4.44-5.el7	openldap-2.4.44-5.el7.x86_64.rpm
oracle linux	7	x86_64	openldap-clients	< 2.4.44-5.el7	openldap-clients-2.4.44-5.el7.x86_64.rpm