openldap-2.3.43-12.0.1.AXS3

エラータID: AXSA:2010-168:01

Release date: 
Thursday, April 1, 2010 - 12:12
Subject: 
openldap-2.3.43-12.0.1.AXS3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP.
Security issues fixed with this release:
CVE-2009-3767
libraries/libldap/tls_o.c in OpenLDAP, when OpenSSL is used, does not properly handle a '0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Solution: 

Update packages.

CVEs: 
CVE-2009-3767
libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.


Additional Info: 

N/A

Download: 

Asianux Server 3 for x86
  1. compat-openldap-2.3.43_2.2.29-12.0.1.AXS3.i386.rpm
    MD5: 16ce549a9510b0cda29a1ddb44b4ed8e
    SHA-256: 304f550d87c738d0875b11d68b17459bc32b0d4290e44acd828b65f2a439986c
    Size: 258.31 kB
  2. openldap-2.3.43-12.0.1.AXS3.i386.rpm
    MD5: 6ed0e0a40d70ff77d58bacbff0aa6cf0
    SHA-256: b96b4cb9ae4534fbf4122b1ab6256c17a81daf07e68e198271222feb6f6483f8
    Size: 295.07 kB
  3. openldap-clients-2.3.43-12.0.1.AXS3.i386.rpm
    MD5: 86c1505c87e3d7ca4b3919fc16406fa5
    SHA-256: 964bf756572f68600f7756fc97f13446975455e92122d27c585d6e1408553463
    Size: 216.63 kB
  4. openldap-devel-2.3.43-12.0.1.AXS3.i386.rpm
    MD5: ac7febfabfc3b086d269aaa48bc766da
    SHA-256: 386d9d381572cbfd357309910fd5e4e8b71e6e39f6e072a5d462c173e0a53873
    Size: 1.55 MB
  5. openldap-servers-2.3.43-12.0.1.AXS3.i386.rpm
    MD5: da9a751d85aef97bcdf7b18a92afb3cc
    SHA-256: c7935a0997b0659410ce193700d99f87d94d6535de24f6a168786292a50a72ee
    Size: 3.06 MB
  6. openldap-servers-sql-2.3.43-12.0.1.AXS3.i386.rpm
    MD5: 029bcc612d00bb017b93b0672f058373
    SHA-256: 1bbffad5c9b4ac764e3b6ddffd8d4230df3e095a977c006196b54b9477cea0bc
    Size: 120.80 kB

Asianux Server 3 for x86_64
  1. compat-openldap-2.3.43_2.2.29-12.0.1.AXS3.x86_64.rpm
    MD5: 59e94d3cc75f65bd5dc6c450e8838403
    SHA-256: 56ff00959e4f0ff1df0d17599ed711c2a57296c8a2d5d5052f7e0905b591adc2
    Size: 265.18 kB
  2. openldap-2.3.43-12.0.1.AXS3.x86_64.rpm
    MD5: cd2576e05f364bf4ef2b5b1d9a9c26c5
    SHA-256: df529f359d7f477e6822e27dfd629d5d8eb7d71ac3bad27278fc9bc550a8f1b9
    Size: 302.92 kB
  3. openldap-clients-2.3.43-12.0.1.AXS3.x86_64.rpm
    MD5: 0b4e205bf974a68488c2dcc476f5f569
    SHA-256: 9557ec937dfd8f4cd18f45b4e9b799f42ad51b4cd9c5f14028dbb3cf142e5b15
    Size: 222.46 kB
  4. openldap-devel-2.3.43-12.0.1.AXS3.x86_64.rpm
    MD5: c6d0a850965c656329702d76c40ce0b9
    SHA-256: 9b2c7a6fb5e45e7b7937a3e50f74cca10c59d22891ca8808dc22f5acd60fc59f
    Size: 1.58 MB
  5. openldap-servers-2.3.43-12.0.1.AXS3.x86_64.rpm
    MD5: 7023054146273a63dda6239208f0eaec
    SHA-256: 80f6427aa1807a5e0b8c928d9cb71754224e93039e3155d544d1d54755dc83bf
    Size: 2.19 MB
  6. openldap-servers-sql-2.3.43-12.0.1.AXS3.x86_64.rpm
    MD5: d9065d27dd4037bddad8da263939c97e
    SHA-256: e9a0fd2b28dbe25b40dce27263ffeac853cd32c83e539e0211932da5826ca647
    Size: 123.02 kB