RHBA-2012:0155 - Bug Fix Advisory

Topic

Updated openldap packages that fix several bugs and add an enhancement are now
available for Red Hat Enterprise Linux 5.

Description

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol)
applications and development tools. LDAP is a set of protocols for accessing
directory services (usually phone book style information, but other information
is possible) over the Internet, similar to the way DNS (Domain Name System)
information is propagated over the Internet. The openldap package contains
configuration files, libraries, and documentation for OpenLDAP.

These updated openldap packages include numerous bug fixes and enhancements.
Space precludes documenting all of these changes in this advisory. Users are
directed to the Red Hat Enterprise Linux 5.8 Technical Notes for information on
the most significant of these changes:

https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.8_Technical_Notes/openldap.html#RHBA-2012-0155

All users of openldap are advised to upgrade to these updated packages, which
provide numerous bug fixes and enhancements.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 563148 - Migration: migrate_all_offline.sh can't handle duplicate entries
• BZ - 591419 - OpenLDAP connection freeze when using TLS
• BZ - 604092 - Init script is working wrong if database recovery is needed
• BZ - 609722 - libldap ignores a directory of CA certificates if any of them can't be read
• BZ - 655133 - function ldap_init_fd() not provided by openldap
• BZ - 665951 - OpenLDAP slapd(8) with ppolicy crash while replace-deleting userPassword attribute
• BZ - 684630 - OpenLDAP packages lack debug data
• BZ - 699652 - Document preferred use of TLS_CACERT instead of TLS_CACERTDIR to specify Certificate Authorities
• BZ - 732381 - strict aliasing warnings during package build
• BZ - 738768 - initscript marked as %config incorrectly

CVEs

(none)

References

• https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.8_Technical_Notes/openldap.html#RHBA-2012-0155