Red Hat Security AdvisoryRHSA-2012:1151
openldap security and bug fix update
Released 2012-08-08 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) openldap-2.4.23-26.el6_3.2, openldap-clients-2.4.23-26.el6_3.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) openldap-2.4.23-26.el6_3.2, openldap-devel-2.4.23-26.el6_3.2, openldap-servers-2.4.23-26.el6_3.2 +1
- Red Hat Enterprise Linux HPC Node (v. 6) openldap-2.4.23-26.el6_3.2, openldap-clients-2.4.23-26.el6_3.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openldap-2.4.23-26.el6_3.2, openldap-devel-2.4.23-26.el6_3.2, openldap-servers-2.4.23-26.el6_3.2 +1
- Red Hat Enterprise Linux Server (v. 6) openldap-2.4.23-26.el6_3.2, openldap-2.4.23-26.el6_3.2.ppc, openldap-clients-2.4.23-26.el6_3.2 +3
- Red Hat Enterprise Linux Server Optional (v. 6) openldap-2.4.23-26.el6_3.2, openldap-servers-sql-2.4.23-26.el6_3.2
- Red Hat Enterprise Linux Workstation (v. 6) openldap-2.4.23-26.el6_3.2, openldap-clients-2.4.23-26.el6_3.2, openldap-devel-2.4.23-26.el6_3.2 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) openldap-2.4.23-26.el6_3.2, openldap-servers-sql-2.4.23-26.el6_3.2
Fixes 1 record
Priority LOW 27
libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphe…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03909 · Published 2012-06-17 · Fixed CWE-200
