Synopsis

Moderate: openldap security update

Type/Severity

Security Advisory: Moderate

Topic

Updated openldap packages that fix multiple security issues are now
available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.

Description

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access
Protocol) applications and development tools.

Multiple flaws were discovered in the way the slapd daemon handled modify
relative distinguished name (modrdn) requests. An authenticated user with
privileges to perform modrdn operations could use these flaws to crash the
slapd daemon via specially-crafted modrdn requests. (CVE-2010-0211,
CVE-2010-0212)

Red Hat would like to thank CERT-FI for responsibly reporting these flaws,
who credit Ilkka Mattila and Tuomas Salomaki for the discovery of the
issues.

Users of OpenLDAP should upgrade to these updated packages, which contain
a backported patch to correct these issues. After installing this update,
the OpenLDAP daemons will be restarted automatically.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 605448 - CVE-2010-0211 openldap: modrdn processing uninitialized pointer free
• BZ - 605452 - CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference

CVEs

• CVE-2010-0211
• CVE-2010-0212

References

• http://www.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 5

SRPM
openldap-2.3.43-12.el5_5.1.src.rpm	SHA-256: 05e2065f7092f6794d9edde47a2544f1038536fcdd515f596dca16ed68331d98
x86_64
compat-openldap-2.3.43_2.2.29-12.el5_5.1.i386.rpm	SHA-256: bde2b4cbf185f7600c0d59bc56c18e63e7cd3d5694840ea69dfe1b87abe7375c
compat-openldap-2.3.43_2.2.29-12.el5_5.1.x86_64.rpm	SHA-256: 0ac39381717511c0ac8f6f6533c577d2a52b83808fb13c9efb96225d28de6808
openldap-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 6fbc152e9eae74625c6b8ade4d16abdc0f43bd85d31f193b1bfc1bf44497fbb2
openldap-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: ee1efaeca6815d38d44d782a9ff3de5e1860e1c9dc3b8825f9bb93c25aa84b74
openldap-clients-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: 27de2a58631ecdf511aba7115c11139cccdd41a31b87ebb3d6a6aa4143a36a05
openldap-devel-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 08f88ba971223f5e66f8d333c9e1ac38fa66b5a2f2a9dfa2f5175cc98b4e59d3
openldap-devel-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: b991b8a4849eb687094d7e4ef3dfef8b6d0404b51b98e8d6b2da72ebfb67a781
openldap-servers-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: 9e3ba8381df6cc49220969718b3d7d9f95ee6dd9809130d0e77abce8d9d3edaf
openldap-servers-overlays-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: 4502dd582a1a931fe3c63aaa2d727e3176c74a224d60115e3b0178b70787fca1
openldap-servers-sql-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: c30d4e6b1bb9bade7bc5152d7a5e13ca42032b244afbb633e47af7ffc1cab11e
ia64
compat-openldap-2.3.43_2.2.29-12.el5_5.1.i386.rpm	SHA-256: bde2b4cbf185f7600c0d59bc56c18e63e7cd3d5694840ea69dfe1b87abe7375c
compat-openldap-2.3.43_2.2.29-12.el5_5.1.ia64.rpm	SHA-256: dc66726e74b99e64f1ff49cf141a2a0751fa67c738e3dec1454c5087dc93c176
openldap-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 6fbc152e9eae74625c6b8ade4d16abdc0f43bd85d31f193b1bfc1bf44497fbb2
openldap-2.3.43-12.el5_5.1.ia64.rpm	SHA-256: 3902e3a195f98f6fc9e1ed36275c8ca9cf866ce5c1431c56783b75b1ef016358
openldap-clients-2.3.43-12.el5_5.1.ia64.rpm	SHA-256: fc8552d7b01495627a6509d1ca4dc1e38fdda35af23609604dbb2ebe132b9c64
openldap-devel-2.3.43-12.el5_5.1.ia64.rpm	SHA-256: 612404f95978cbb0aae29a6f0bc5a1970881b0d9f0093e1e166b42e35fe818b8
openldap-servers-2.3.43-12.el5_5.1.ia64.rpm	SHA-256: 5d9c67da96012a9e9e9f9b4001966ca675121c90fb4473939e008bb5df98a97b
openldap-servers-overlays-2.3.43-12.el5_5.1.ia64.rpm	SHA-256: d52999fac28220115dc99233b726c559702d8652bbf021c4bf897b2f8b1a7ed9
openldap-servers-sql-2.3.43-12.el5_5.1.ia64.rpm	SHA-256: a380c43703babcc3e79c816a0f24ece377e0aefa5ab665f5090ee74f493bfb67
i386
compat-openldap-2.3.43_2.2.29-12.el5_5.1.i386.rpm	SHA-256: bde2b4cbf185f7600c0d59bc56c18e63e7cd3d5694840ea69dfe1b87abe7375c
openldap-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 6fbc152e9eae74625c6b8ade4d16abdc0f43bd85d31f193b1bfc1bf44497fbb2
openldap-clients-2.3.43-12.el5_5.1.i386.rpm	SHA-256: b9ac3734cd108b6e9097c0621b4e83d4ffb20309fcae72c9c30f30868ce473ff
openldap-devel-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 08f88ba971223f5e66f8d333c9e1ac38fa66b5a2f2a9dfa2f5175cc98b4e59d3
openldap-servers-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 93543b4e7998cdc1cd4c3ca27683c9fe9c53121de2f0a76020b86b591d955daf
openldap-servers-overlays-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 47f5cb1c7ac8a88cdb3cea1854870d7f44c7cf19e1e7b7ee4b1ddf1667b234ea
openldap-servers-sql-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 800687929dfc9d9e2238d421273d45afb1a1b4a28ab67b99f6106b233d4f0afc

Red Hat Enterprise Linux Workstation 5

SRPM
openldap-2.3.43-12.el5_5.1.src.rpm	SHA-256: 05e2065f7092f6794d9edde47a2544f1038536fcdd515f596dca16ed68331d98
x86_64
compat-openldap-2.3.43_2.2.29-12.el5_5.1.i386.rpm	SHA-256: bde2b4cbf185f7600c0d59bc56c18e63e7cd3d5694840ea69dfe1b87abe7375c
compat-openldap-2.3.43_2.2.29-12.el5_5.1.x86_64.rpm	SHA-256: 0ac39381717511c0ac8f6f6533c577d2a52b83808fb13c9efb96225d28de6808
openldap-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 6fbc152e9eae74625c6b8ade4d16abdc0f43bd85d31f193b1bfc1bf44497fbb2
openldap-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: ee1efaeca6815d38d44d782a9ff3de5e1860e1c9dc3b8825f9bb93c25aa84b74
openldap-clients-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: 27de2a58631ecdf511aba7115c11139cccdd41a31b87ebb3d6a6aa4143a36a05
openldap-devel-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 08f88ba971223f5e66f8d333c9e1ac38fa66b5a2f2a9dfa2f5175cc98b4e59d3
openldap-devel-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: b991b8a4849eb687094d7e4ef3dfef8b6d0404b51b98e8d6b2da72ebfb67a781
openldap-servers-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: 9e3ba8381df6cc49220969718b3d7d9f95ee6dd9809130d0e77abce8d9d3edaf
openldap-servers-overlays-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: 4502dd582a1a931fe3c63aaa2d727e3176c74a224d60115e3b0178b70787fca1
openldap-servers-sql-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: c30d4e6b1bb9bade7bc5152d7a5e13ca42032b244afbb633e47af7ffc1cab11e
i386
compat-openldap-2.3.43_2.2.29-12.el5_5.1.i386.rpm	SHA-256: bde2b4cbf185f7600c0d59bc56c18e63e7cd3d5694840ea69dfe1b87abe7375c
openldap-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 6fbc152e9eae74625c6b8ade4d16abdc0f43bd85d31f193b1bfc1bf44497fbb2
openldap-clients-2.3.43-12.el5_5.1.i386.rpm	SHA-256: b9ac3734cd108b6e9097c0621b4e83d4ffb20309fcae72c9c30f30868ce473ff
openldap-devel-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 08f88ba971223f5e66f8d333c9e1ac38fa66b5a2f2a9dfa2f5175cc98b4e59d3
openldap-servers-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 93543b4e7998cdc1cd4c3ca27683c9fe9c53121de2f0a76020b86b591d955daf
openldap-servers-overlays-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 47f5cb1c7ac8a88cdb3cea1854870d7f44c7cf19e1e7b7ee4b1ddf1667b234ea
openldap-servers-sql-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 800687929dfc9d9e2238d421273d45afb1a1b4a28ab67b99f6106b233d4f0afc

Red Hat Enterprise Linux Desktop 5

SRPM
openldap-2.3.43-12.el5_5.1.src.rpm	SHA-256: 05e2065f7092f6794d9edde47a2544f1038536fcdd515f596dca16ed68331d98
x86_64
compat-openldap-2.3.43_2.2.29-12.el5_5.1.i386.rpm	SHA-256: bde2b4cbf185f7600c0d59bc56c18e63e7cd3d5694840ea69dfe1b87abe7375c
compat-openldap-2.3.43_2.2.29-12.el5_5.1.x86_64.rpm	SHA-256: 0ac39381717511c0ac8f6f6533c577d2a52b83808fb13c9efb96225d28de6808
openldap-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 6fbc152e9eae74625c6b8ade4d16abdc0f43bd85d31f193b1bfc1bf44497fbb2
openldap-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: ee1efaeca6815d38d44d782a9ff3de5e1860e1c9dc3b8825f9bb93c25aa84b74
openldap-clients-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: 27de2a58631ecdf511aba7115c11139cccdd41a31b87ebb3d6a6aa4143a36a05
i386
compat-openldap-2.3.43_2.2.29-12.el5_5.1.i386.rpm	SHA-256: bde2b4cbf185f7600c0d59bc56c18e63e7cd3d5694840ea69dfe1b87abe7375c
openldap-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 6fbc152e9eae74625c6b8ade4d16abdc0f43bd85d31f193b1bfc1bf44497fbb2
openldap-clients-2.3.43-12.el5_5.1.i386.rpm	SHA-256: b9ac3734cd108b6e9097c0621b4e83d4ffb20309fcae72c9c30f30868ce473ff

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
openldap-2.3.43-12.el5_5.1.src.rpm	SHA-256: 05e2065f7092f6794d9edde47a2544f1038536fcdd515f596dca16ed68331d98
s390x
compat-openldap-2.3.43_2.2.29-12.el5_5.1.s390.rpm	SHA-256: 4d4a0253ebf20e97935bfa50656b257bf23de6d83d22b7fb035302b92efbd1ea
compat-openldap-2.3.43_2.2.29-12.el5_5.1.s390x.rpm	SHA-256: 925c9e803cb0189d30ccdf2c684e6953c0edea80e281f2dcd6096a1fbc6aaa36
openldap-2.3.43-12.el5_5.1.s390.rpm	SHA-256: dc4492d988ebbd23b97aeb6ac3dac467f767b5c35e88e3930e109f18788022a5
openldap-2.3.43-12.el5_5.1.s390x.rpm	SHA-256: e6b9222af860229f29a1ef32ebecef2766941480447a0d3a54dbe2965176d626
openldap-clients-2.3.43-12.el5_5.1.s390x.rpm	SHA-256: 801ae8b4342cb5e192952bcf82f42b6c4344778e4524ef218709c8a9e633e556
openldap-devel-2.3.43-12.el5_5.1.s390.rpm	SHA-256: 4f8f44db52b210d16f74c25d97a92836bf180dbab86325feb0df79f8df3e18b1
openldap-devel-2.3.43-12.el5_5.1.s390x.rpm	SHA-256: 92a4c04809c42e162e65607684c68457a2e5480d1117bc0a993c346a18d2124d
openldap-servers-2.3.43-12.el5_5.1.s390x.rpm	SHA-256: 88ac346314123f4818a4fb3fb05e4ccbdebda10cf14bcf1136ab0bdd07e025dc
openldap-servers-overlays-2.3.43-12.el5_5.1.s390x.rpm	SHA-256: cd55402d3d4b91bc9e2e48ef632be14904eb3fab63df9d0cb8cca7ac97cb60f0
openldap-servers-sql-2.3.43-12.el5_5.1.s390x.rpm	SHA-256: c93ecc3546ee2bf5f9b6c453051d1316175826b8d33f984ffcdb939129aa4225

Red Hat Enterprise Linux for Power, big endian 5

SRPM
openldap-2.3.43-12.el5_5.1.src.rpm	SHA-256: 05e2065f7092f6794d9edde47a2544f1038536fcdd515f596dca16ed68331d98
ppc
compat-openldap-2.3.43_2.2.29-12.el5_5.1.ppc.rpm	SHA-256: 5bbbe07352784419058f73c5d949ced36d996b1699528fb65eda0d1086830495
compat-openldap-2.3.43_2.2.29-12.el5_5.1.ppc64.rpm	SHA-256: 55b46a1d81a97f59686475cabc2989fd8fd9d07d32d623f6d3218975ae3a092f
openldap-2.3.43-12.el5_5.1.ppc.rpm	SHA-256: 865c30cf7bc10024857b41c229b6b472b16fbdc6a78fa872670ff0a4029e41c6
openldap-2.3.43-12.el5_5.1.ppc64.rpm	SHA-256: e2fdfe25bb441e49e725fbd6d70b56ae73699f678649cc933789c77d8ffd06c0
openldap-clients-2.3.43-12.el5_5.1.ppc.rpm	SHA-256: 400d02db72b01a9a491dae4f9e939c588be46aaf775707bb785aa9b12999b261
openldap-devel-2.3.43-12.el5_5.1.ppc.rpm	SHA-256: a0713f54b9dea52d077b7cd47098d3366cfe6c68fa0f8808bcd3c4315f0031ea
openldap-devel-2.3.43-12.el5_5.1.ppc64.rpm	SHA-256: 40df72461c3ee04610938372f85a86a62c1e49ab246a3ed1571760a21d4ee88d
openldap-servers-2.3.43-12.el5_5.1.ppc.rpm	SHA-256: 44b36132bb7db470c4ca449c164c2370a2bb587e7f7ce3bf1a88679e31c77ec0
openldap-servers-overlays-2.3.43-12.el5_5.1.ppc.rpm	SHA-256: e9b017bfeec60261e0928c86d666c6995c6d528eefe5f592a00e884e31df9891
openldap-servers-sql-2.3.43-12.el5_5.1.ppc.rpm	SHA-256: c634c03ab652c3f8690e9d69c4f0e970703dc9dcb923f239d980498f27f56133

Red Hat Enterprise Linux Server from RHUI 5

SRPM
openldap-2.3.43-12.el5_5.1.src.rpm	SHA-256: 05e2065f7092f6794d9edde47a2544f1038536fcdd515f596dca16ed68331d98
x86_64
compat-openldap-2.3.43_2.2.29-12.el5_5.1.i386.rpm	SHA-256: bde2b4cbf185f7600c0d59bc56c18e63e7cd3d5694840ea69dfe1b87abe7375c
compat-openldap-2.3.43_2.2.29-12.el5_5.1.x86_64.rpm	SHA-256: 0ac39381717511c0ac8f6f6533c577d2a52b83808fb13c9efb96225d28de6808
openldap-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 6fbc152e9eae74625c6b8ade4d16abdc0f43bd85d31f193b1bfc1bf44497fbb2
openldap-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: ee1efaeca6815d38d44d782a9ff3de5e1860e1c9dc3b8825f9bb93c25aa84b74
openldap-clients-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: 27de2a58631ecdf511aba7115c11139cccdd41a31b87ebb3d6a6aa4143a36a05
openldap-devel-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 08f88ba971223f5e66f8d333c9e1ac38fa66b5a2f2a9dfa2f5175cc98b4e59d3
openldap-devel-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: b991b8a4849eb687094d7e4ef3dfef8b6d0404b51b98e8d6b2da72ebfb67a781
openldap-servers-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: 9e3ba8381df6cc49220969718b3d7d9f95ee6dd9809130d0e77abce8d9d3edaf
openldap-servers-overlays-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: 4502dd582a1a931fe3c63aaa2d727e3176c74a224d60115e3b0178b70787fca1
openldap-servers-sql-2.3.43-12.el5_5.1.x86_64.rpm	SHA-256: c30d4e6b1bb9bade7bc5152d7a5e13ca42032b244afbb633e47af7ffc1cab11e
i386
compat-openldap-2.3.43_2.2.29-12.el5_5.1.i386.rpm	SHA-256: bde2b4cbf185f7600c0d59bc56c18e63e7cd3d5694840ea69dfe1b87abe7375c
openldap-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 6fbc152e9eae74625c6b8ade4d16abdc0f43bd85d31f193b1bfc1bf44497fbb2
openldap-clients-2.3.43-12.el5_5.1.i386.rpm	SHA-256: b9ac3734cd108b6e9097c0621b4e83d4ffb20309fcae72c9c30f30868ce473ff
openldap-devel-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 08f88ba971223f5e66f8d333c9e1ac38fa66b5a2f2a9dfa2f5175cc98b4e59d3
openldap-servers-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 93543b4e7998cdc1cd4c3ca27683c9fe9c53121de2f0a76020b86b591d955daf
openldap-servers-overlays-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 47f5cb1c7ac8a88cdb3cea1854870d7f44c7cf19e1e7b7ee4b1ddf1667b234ea
openldap-servers-sql-2.3.43-12.el5_5.1.i386.rpm	SHA-256: 800687929dfc9d9e2238d421273d45afb1a1b4a28ab67b99f6106b233d4f0afc