openldap-2.4.39-7.el7

エラータID: AXSA:2015-501:01

Release date: 
Wednesday, September 30, 2015 - 11:17
Subject: 
openldap-2.4.39-7.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access
Protocol) applications and development tools. LDAP is a set of
protocols for accessing directory services (usually phone book style
information, but other information is possible) over the Internet,
similar to the way DNS (Domain Name System) information is propagated
over the Internet. The openldap package contains configuration files,
libraries, and documentation for OpenLDAP.

Security issues fixed with this release:

CVE-2015-6908
The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42
and earlier allows remote attackers to cause a denial of service
(reachable assertion and application crash) via crafted BER data, as
demonstrated by an attack against slapd.

Solution: 

Update packages.

CVEs: 
CVE-2015-6908
The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.
Additional Info: 

N/A

Download: 

SRPMS
  1. openldap-2.4.39-7.el7.src.rpm
    MD5: 137e2a839e8f65d7ac8d56b13211574f
    SHA-256: 8ec38ead00aabcb7d672b57bae3975cef843009bd1ff0c137331cdc04f5b16c8
    Size: 5.33 MB

Asianux Server 7 for x86_64
  1. openldap-2.4.39-7.el7.x86_64.rpm
    MD5: 81c0eaa1d279e87f888ddcd13b7698f9
    SHA-256: a830be0e55a6445e01d01267b7e9e48b73f16b86a2d5ad82a7c616fb67cff508
    Size: 342.77 kB
  2. openldap-clients-2.4.39-7.el7.x86_64.rpm
    MD5: 5911ceadc484d2c8a47a22d2da96cf6d
    SHA-256: 3b4940645ccb202c17205d62c999f4383f1ec8b630f2a8fd477b66508665dc89
    Size: 182.75 kB
  3. openldap-devel-2.4.39-7.el7.x86_64.rpm
    MD5: f90800b0be0707d4c5ab7e4c4f7bed01
    SHA-256: fd7639763983f394eea564c518f354a869d95514f173b675c3ca72efb91aa4fd
    Size: 795.61 kB
  4. openldap-servers-2.4.39-7.el7.x86_64.rpm
    MD5: 60b1f7c898115bb3df13384cba431289
    SHA-256: 4c2856cff311732d52888cd8957c59b857b751cef02808c653f46763f29c0a2b
    Size: 2.09 MB
  5. openldap-2.4.39-7.el7.i686.rpm
    MD5: 0209e04decc6f55f2b0fccc59d6d6022
    SHA-256: 302a0d0a40c271c76deb91ebd040cf7c155695e4e0eaf74f4d328aa7eac19b09
    Size: 340.39 kB
  6. openldap-devel-2.4.39-7.el7.i686.rpm
    MD5: 385abc2e58a533dad55a402e0ddcd59f
    SHA-256: 7e71b7cc7d232b68234a19bca94fcb4ff702c84bbfa6178c564fbbc75aeb940a
    Size: 795.63 kB