Red Hat Security AdvisoryRHSA-2015:2131
openldap security, bug fix, and enhancement update
Released 2015-11-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openldap-2.4.40-8.el7, openldap-clients-2.4.40-8.el7
- Red Hat Enterprise Linux Client Optional (v. 7) openldap-devel-2.4.40-8.el7, openldap-servers-2.4.40-8.el7, openldap-servers-sql-2.4.40-8.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) openldap-2.4.40-8.el7, openldap-clients-2.4.40-8.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openldap-devel-2.4.40-8.el7, openldap-servers-2.4.40-8.el7, openldap-servers-sql-2.4.40-8.el7
- Red Hat Enterprise Linux Server (v. 7) openldap-2.4.40-8.el7, openldap-2.4.40-8.el7.ppc, openldap-clients-2.4.40-8.el7 +3
- Red Hat Enterprise Linux Server Optional (v. 7) openldap-servers-sql-2.4.40-8.el7
- Red Hat Enterprise Linux Workstation (v. 7) openldap-2.4.40-8.el7, openldap-clients-2.4.40-8.el7, openldap-devel-2.4.40-8.el7 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) openldap-servers-sql-2.4.40-8.el7
Fixes 2 records
Priority MEDIUM 41
The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05269 · Published 2015-12-07 · Partial fix
Priority LOW 38
An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03094 · Published 2020-01-02 · Partial fix CWE-193
