RHBA-2007:1127 - Bug Fix Advisory

Topic

Updated mozldap packages that fix several bugs and add enhancements are
now available.

Description

The Mozilla LDAP C SDK is a set of libraries that allow applications to
communicate with LDAP directory servers. These libraries are derived from
the University of Michigan and Netscape LDAP libraries. They use the
Mozilla Netscape Portable Runtime (NSPR) API and Mozilla Network Security
Services (NSS) for cryptography.

These updated packages fix the following bugs:

• a loop in wait4msg() may have caused Mozilla to crash in certain

situations. This has been resolved in these updated packages.

• attempting to bind using an IPv6 address instead of a hostname, for

example, using the "ldapsearch -h [IPv6-address]" command, where
[IPv6-address] is the IPv6 address of the host running the LDAP server,
caused the following errors:

Bind Error: Local error
Bind Error: additional info: SASL(-1): generic failure: GSSAPI Error: An
invalid name was supplied (Hostname cannot be canonicalized)

This error has been resolved in these updated packages. Note, the mozldap
ldapsearch command found in the /usr/lib[64]/mozldap directory is not the
same as the OpenLDAP ldapsearch command found in the /usr/bin/ directory.

• a doublefree error in nsldapi_free_request has been resolved.

As well, these updated packages add the following enhancements:

• improved IPv6 support.
• updates mozldap to version 6.0.5.

All mozldap users are advised to upgrade to these updated packages, which
resolve these issues and add these enhancements.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.1 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.1 ia64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.1 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.1 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.1 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 411971 - Need mozldap 6.0.5 in rhel 5.1 update

CVEs

(none)

References

(none)