openldap-2.3.43-12.0.1.AXS3

エラータID: AXSA:2010-168:01

リリース日: 
2010/04/01 Thursday - 12:12
題名: 
openldap-2.3.43-12.0.1.AXS3
影響のあるチャネル: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。
[Security Fix]

- OpenLDAP には、OpenSSL を使用している場合に X.509 証明書の Common Name (CN) フィールド内の '\\0' 文字を適切に処理しないため、任意の SSL サーバになりすまされる脆弱性が存在します。
本脆弱性は CVE-2009-2408 と関連があります。(CVE-2009-3767)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2009-3767
libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.


追加情報: 

N/A

ダウンロード: 

Asianux Server 3 for x86
  1. compat-openldap-2.3.43_2.2.29-12.0.1.AXS3.i386.rpm
    MD5: 16ce549a9510b0cda29a1ddb44b4ed8e
    SHA-256: 304f550d87c738d0875b11d68b17459bc32b0d4290e44acd828b65f2a439986c
    Size: 258.31 kB
  2. openldap-2.3.43-12.0.1.AXS3.i386.rpm
    MD5: 6ed0e0a40d70ff77d58bacbff0aa6cf0
    SHA-256: b96b4cb9ae4534fbf4122b1ab6256c17a81daf07e68e198271222feb6f6483f8
    Size: 295.07 kB
  3. openldap-clients-2.3.43-12.0.1.AXS3.i386.rpm
    MD5: 86c1505c87e3d7ca4b3919fc16406fa5
    SHA-256: 964bf756572f68600f7756fc97f13446975455e92122d27c585d6e1408553463
    Size: 216.63 kB
  4. openldap-devel-2.3.43-12.0.1.AXS3.i386.rpm
    MD5: ac7febfabfc3b086d269aaa48bc766da
    SHA-256: 386d9d381572cbfd357309910fd5e4e8b71e6e39f6e072a5d462c173e0a53873
    Size: 1.55 MB
  5. openldap-servers-2.3.43-12.0.1.AXS3.i386.rpm
    MD5: da9a751d85aef97bcdf7b18a92afb3cc
    SHA-256: c7935a0997b0659410ce193700d99f87d94d6535de24f6a168786292a50a72ee
    Size: 3.06 MB
  6. openldap-servers-sql-2.3.43-12.0.1.AXS3.i386.rpm
    MD5: 029bcc612d00bb017b93b0672f058373
    SHA-256: 1bbffad5c9b4ac764e3b6ddffd8d4230df3e095a977c006196b54b9477cea0bc
    Size: 120.80 kB

Asianux Server 3 for x86_64
  1. compat-openldap-2.3.43_2.2.29-12.0.1.AXS3.x86_64.rpm
    MD5: 59e94d3cc75f65bd5dc6c450e8838403
    SHA-256: 56ff00959e4f0ff1df0d17599ed711c2a57296c8a2d5d5052f7e0905b591adc2
    Size: 265.18 kB
  2. openldap-2.3.43-12.0.1.AXS3.x86_64.rpm
    MD5: cd2576e05f364bf4ef2b5b1d9a9c26c5
    SHA-256: df529f359d7f477e6822e27dfd629d5d8eb7d71ac3bad27278fc9bc550a8f1b9
    Size: 302.92 kB
  3. openldap-clients-2.3.43-12.0.1.AXS3.x86_64.rpm
    MD5: 0b4e205bf974a68488c2dcc476f5f569
    SHA-256: 9557ec937dfd8f4cd18f45b4e9b799f42ad51b4cd9c5f14028dbb3cf142e5b15
    Size: 222.46 kB
  4. openldap-devel-2.3.43-12.0.1.AXS3.x86_64.rpm
    MD5: c6d0a850965c656329702d76c40ce0b9
    SHA-256: 9b2c7a6fb5e45e7b7937a3e50f74cca10c59d22891ca8808dc22f5acd60fc59f
    Size: 1.58 MB
  5. openldap-servers-2.3.43-12.0.1.AXS3.x86_64.rpm
    MD5: 7023054146273a63dda6239208f0eaec
    SHA-256: 80f6427aa1807a5e0b8c928d9cb71754224e93039e3155d544d1d54755dc83bf
    Size: 2.19 MB
  6. openldap-servers-sql-2.3.43-12.0.1.AXS3.x86_64.rpm
    MD5: d9065d27dd4037bddad8da263939c97e
    SHA-256: e9a0fd2b28dbe25b40dce27263ffeac853cd32c83e539e0211932da5826ca647
    Size: 123.02 kB