openldap-2.3.27-8.4.1AXS3

エラータID: AXSA:2008-79:02

リリース日: 
2008/09/22 Monday - 12:52
題名: 
openldap-2.3.27-8.4.1AXS3
影響のあるチャネル: 
Asianux Server 3 for x86_64
Asianux Server 3 for ppc
Asianux Server 3 for ia64
Asianux Server 3 for x86
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
OpenLDAP の liblber/io.c には、ASN.1 BER データグラムの処理に不備があり、サービス運用妨害 (DoS) の脆弱性があります。(CVE-2008-2952)

一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください

CVE: 
CVE-2008-2952
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via crafted ASN.1 BER datagrams that trigger an assertion error.


追加情報: 

N/A

ダウンロード: 

Asianux Server 3 for x86
  1. compat-openldap-2.3.27_2.2.29-8.4.1AXS3.i386.rpm
    MD5: 89d3c25c99db130cc2d0224706f14f8b
    SHA-256: db8accef7782615ec913ca30a57d1175b309afb1cb960340b1b9887149a0a788
    Size: 257.11 kB
  2. openldap-2.3.27-8.4.1AXS3.i386.rpm
    MD5: 1d09a8202d98230f7769170417df7018
    SHA-256: 3513252e1a866445d1cad08e59aebda5d19fbca2f0ae884cc82b6900ceac5f82
    Size: 288.27 kB
  3. openldap-clients-2.3.27-8.4.1AXS3.i386.rpm
    MD5: 73783778fddf82432c8346d566f1ef16
    SHA-256: 44ec21da08426099cd14743ea488fbd63f4a7e1a3a218c2a178ed21f44a15b66
    Size: 180.42 kB
  4. openldap-devel-2.3.27-8.4.1AXS3.i386.rpm
    MD5: 447352056e23e928236e26a2533339a7
    SHA-256: d44647a80fb85c0229319e3c730474f09e89eedf141223035af1f14c933870f5
    Size: 1.58 MB
  5. openldap-servers-2.3.27-8.4.1AXS3.i386.rpm
    MD5: f60409b58de3227658db4398da25add3
    SHA-256: adc5d94beb320b4f4f457d89197a2b3af30d89e25664a00b9ae82b5c1500e376
    Size: 2.21 MB
  6. openldap-servers-sql-2.3.27-8.4.1AXS3.i386.rpm
    MD5: 5948b4c5818884fbb578549a0dd09c11
    SHA-256: 68872dcadf4e38177a5e72bad9eb50655edc5b1ce30ed90df41b4c7a7bf311e0
    Size: 119.79 kB

Asianux Server 3 for x86_64
  1. compat-openldap-2.3.27_2.2.29-8.4.1AXS3.x86_64.rpm
    MD5: cc2a31c92ec125dfc3416fd093e9ed60
    SHA-256: 8b0d03bb40608486992e23c1d283865e86fd2fa09d2a2e82afd637a82d4c7bdd
    Size: 261.48 kB
  2. openldap-2.3.27-8.4.1AXS3.x86_64.rpm
    MD5: ded2bef790ed489f474614e685c7a9eb
    SHA-256: e7b871388c6b6b0e284a89ee6b10c3e70f7babea0b3f32767b05ca6968b7c8b9
    Size: 295.24 kB
  3. openldap-clients-2.3.27-8.4.1AXS3.x86_64.rpm
    MD5: 8bb26f5e6e141663547752a56c23daad
    SHA-256: a736f997b14eaae29c1ed0d158da4186ccc60b8c7e58d21af026bf694b44842a
    Size: 186.93 kB
  4. openldap-devel-2.3.27-8.4.1AXS3.x86_64.rpm
    MD5: 2413b3ab3fef9b4ff4b06725fc223775
    SHA-256: b3deea717e70e3f66cb3d25aef76ba91af8afd0b5d4bb9d93ebb690cfab7fe3f
    Size: 1.61 MB
  5. openldap-servers-2.3.27-8.4.1AXS3.x86_64.rpm
    MD5: b4a85d49ec8a45dc706bbd0b4fcefab9
    SHA-256: 7264a17896a29232885d521b011fa26fdef79a91ba52ddff937d2af1b528e0ea
    Size: 2.21 MB
  6. openldap-servers-sql-2.3.27-8.4.1AXS3.x86_64.rpm
    MD5: 97f333b5504a6d5740c224c2d2e5e760
    SHA-256: a314432663548bb44bdedae964346e06acfdf502937ba6ed5249ed042d6d9e99
    Size: 121.67 kB