Synopsis

Moderate: openldap security update

Type/Severity

Security Advisory: Moderate

Topic

Updated openldap packages that fix one security issue are now available for
Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having Moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

Description

OpenLDAP is an open source suite of Lightweight Directory Access Protocol
(LDAP) applications and development tools. LDAP is a set of protocols used
to access and maintain distributed directory information services over an
IP network. The openldap package contains configuration files, libraries,
and documentation for OpenLDAP.

A denial of service flaw was found in the way the OpenLDAP server daemon
(slapd) performed reference counting when using the rwm (rewrite/remap)
overlay. A remote attacker able to query the OpenLDAP server could use this
flaw to crash the server by immediately unbinding from the server after
sending a search request. (CVE-2013-4449)

Red Hat would like to thank Michael Vishchers from Seven Principles AG for
reporting this issue.

All openldap users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 1019490 - CVE-2013-4449 openldap: segfault on certain queries with rwm overlay

CVEs

• CVE-2013-4449

References

• https://access.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 5

SRPM
openldap-2.3.43-27.el5_10.src.rpm	SHA-256: c6c3924cc20b1edc21e12129e4ef937f792cb5c29c05d3ef66d4d81b57b8f372
x86_64
compat-openldap-2.3.43_2.2.29-27.el5_10.i386.rpm	SHA-256: 370d3f1ce2669cb39a151c89e5915f38bf8f95f00e62a6106298b2708651e95d
compat-openldap-2.3.43_2.2.29-27.el5_10.x86_64.rpm	SHA-256: dc2c6c43f38905c09a06e380c8c5244eca0f35927d7e080ace57ed05a86a83af
openldap-2.3.43-27.el5_10.i386.rpm	SHA-256: d4088888a630f8030c9505663cddb478b24fae349fa1431a6836ceb5f28f9bf1
openldap-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 9722e915a0933b6978cd463127deeac89c44e49a6e04f0d9bc639d7a91d407eb
openldap-clients-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 168312fa0fea53ba6883b3d44b8fabb00f6c07ee98516af33488ec3d964f3a3a
openldap-debuginfo-2.3.43-27.el5_10.i386.rpm	SHA-256: f70dbc9a6ee30ce7df4d2c4b70c2e8e16b6de5f94e9e751c0ca791a2e16a1400
openldap-debuginfo-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 4e1144b6964910ec899d3e9d1dbffa31f71ba09d27828615c0e985b1a3a2cecd
openldap-devel-2.3.43-27.el5_10.i386.rpm	SHA-256: ab5d704e42065a488508d82d521d00403a243a0a53c0a355af1aeac79d41aa06
openldap-devel-2.3.43-27.el5_10.x86_64.rpm	SHA-256: ae73d17cd666ed65febac6f7c2d82ffb2c8f8c922d3c87dec011feb0e0d20a44
openldap-servers-2.3.43-27.el5_10.x86_64.rpm	SHA-256: f160b480897c2acb3105573246307680a3cbfa190d729a0859fe87e76abdd4f8
openldap-servers-overlays-2.3.43-27.el5_10.x86_64.rpm	SHA-256: a4b75ccbdb9818754359f3771c2125881bf5ce111cb3348f299236ca3bbc4b25
openldap-servers-sql-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 005ce79a3ba69cab5bb0d474c4546675e2bd92dfe5828bd4a2760904950d2bcd
ia64
compat-openldap-2.3.43_2.2.29-27.el5_10.i386.rpm	SHA-256: 370d3f1ce2669cb39a151c89e5915f38bf8f95f00e62a6106298b2708651e95d
compat-openldap-2.3.43_2.2.29-27.el5_10.ia64.rpm	SHA-256: c7351d09bf870f63689b8638565e9f4aa2e3bc74d377f8d027c959cf0d00e63b
openldap-2.3.43-27.el5_10.i386.rpm	SHA-256: d4088888a630f8030c9505663cddb478b24fae349fa1431a6836ceb5f28f9bf1
openldap-2.3.43-27.el5_10.ia64.rpm	SHA-256: 554c01953240fd20b2310ab7697d3d39eb597c113c98b3d321885fe84168fbc7
openldap-clients-2.3.43-27.el5_10.ia64.rpm	SHA-256: c76732c47c70d484336f744110dee84ddc942a712fb837781ce58ecaaeabfc3e
openldap-debuginfo-2.3.43-27.el5_10.i386.rpm	SHA-256: f70dbc9a6ee30ce7df4d2c4b70c2e8e16b6de5f94e9e751c0ca791a2e16a1400
openldap-debuginfo-2.3.43-27.el5_10.ia64.rpm	SHA-256: 8ddfd7c9e7ec2829f15bb4c92a87c68f47d8badf1fc1d9d766da838c6302430a
openldap-devel-2.3.43-27.el5_10.ia64.rpm	SHA-256: 0680ef538806122d60c5f1b175da5020c37841fc1b2bd5fa2340aa615ec79df3
openldap-servers-2.3.43-27.el5_10.ia64.rpm	SHA-256: 6c7e2d62149a744ac1f8c631f1fb941f9cffe50d0f44fcca1526d4113b22dba4
openldap-servers-overlays-2.3.43-27.el5_10.ia64.rpm	SHA-256: 4acbe21a70fc6d087ee92c5a4b20b8130e28c62c4f5217aad79fc1e96229e9b3
openldap-servers-sql-2.3.43-27.el5_10.ia64.rpm	SHA-256: 35fcceb807407059b46f4f263d39dd99c2a27d84778c34aa76494f763234fdc0
i386
compat-openldap-2.3.43_2.2.29-27.el5_10.i386.rpm	SHA-256: 370d3f1ce2669cb39a151c89e5915f38bf8f95f00e62a6106298b2708651e95d
openldap-2.3.43-27.el5_10.i386.rpm	SHA-256: d4088888a630f8030c9505663cddb478b24fae349fa1431a6836ceb5f28f9bf1
openldap-clients-2.3.43-27.el5_10.i386.rpm	SHA-256: 6b1cade783fda31489321b2901bcc8f99727986364c978879f629c351b296302
openldap-debuginfo-2.3.43-27.el5_10.i386.rpm	SHA-256: f70dbc9a6ee30ce7df4d2c4b70c2e8e16b6de5f94e9e751c0ca791a2e16a1400
openldap-devel-2.3.43-27.el5_10.i386.rpm	SHA-256: ab5d704e42065a488508d82d521d00403a243a0a53c0a355af1aeac79d41aa06
openldap-servers-2.3.43-27.el5_10.i386.rpm	SHA-256: da52f44189e8410f0285f18abc77ac655de72889d0cb614d56496c52dae2cb26
openldap-servers-overlays-2.3.43-27.el5_10.i386.rpm	SHA-256: c783d92eeeadce526e290f4ad318155e97bf454867555b2b0ea4b457316613be
openldap-servers-sql-2.3.43-27.el5_10.i386.rpm	SHA-256: bbebfe5e2a8770b8d56ce92dad4e47f75a56db18b1b84b87bab8e5aed97623a6

Red Hat Enterprise Linux Workstation 5

SRPM
openldap-2.3.43-27.el5_10.src.rpm	SHA-256: c6c3924cc20b1edc21e12129e4ef937f792cb5c29c05d3ef66d4d81b57b8f372
x86_64
compat-openldap-2.3.43_2.2.29-27.el5_10.i386.rpm	SHA-256: 370d3f1ce2669cb39a151c89e5915f38bf8f95f00e62a6106298b2708651e95d
compat-openldap-2.3.43_2.2.29-27.el5_10.x86_64.rpm	SHA-256: dc2c6c43f38905c09a06e380c8c5244eca0f35927d7e080ace57ed05a86a83af
openldap-2.3.43-27.el5_10.i386.rpm	SHA-256: d4088888a630f8030c9505663cddb478b24fae349fa1431a6836ceb5f28f9bf1
openldap-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 9722e915a0933b6978cd463127deeac89c44e49a6e04f0d9bc639d7a91d407eb
openldap-clients-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 168312fa0fea53ba6883b3d44b8fabb00f6c07ee98516af33488ec3d964f3a3a
openldap-debuginfo-2.3.43-27.el5_10.i386.rpm	SHA-256: f70dbc9a6ee30ce7df4d2c4b70c2e8e16b6de5f94e9e751c0ca791a2e16a1400
openldap-debuginfo-2.3.43-27.el5_10.i386.rpm	SHA-256: f70dbc9a6ee30ce7df4d2c4b70c2e8e16b6de5f94e9e751c0ca791a2e16a1400
openldap-debuginfo-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 4e1144b6964910ec899d3e9d1dbffa31f71ba09d27828615c0e985b1a3a2cecd
openldap-debuginfo-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 4e1144b6964910ec899d3e9d1dbffa31f71ba09d27828615c0e985b1a3a2cecd
openldap-devel-2.3.43-27.el5_10.i386.rpm	SHA-256: ab5d704e42065a488508d82d521d00403a243a0a53c0a355af1aeac79d41aa06
openldap-devel-2.3.43-27.el5_10.x86_64.rpm	SHA-256: ae73d17cd666ed65febac6f7c2d82ffb2c8f8c922d3c87dec011feb0e0d20a44
openldap-servers-2.3.43-27.el5_10.x86_64.rpm	SHA-256: f160b480897c2acb3105573246307680a3cbfa190d729a0859fe87e76abdd4f8
openldap-servers-overlays-2.3.43-27.el5_10.x86_64.rpm	SHA-256: a4b75ccbdb9818754359f3771c2125881bf5ce111cb3348f299236ca3bbc4b25
openldap-servers-sql-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 005ce79a3ba69cab5bb0d474c4546675e2bd92dfe5828bd4a2760904950d2bcd
i386
compat-openldap-2.3.43_2.2.29-27.el5_10.i386.rpm	SHA-256: 370d3f1ce2669cb39a151c89e5915f38bf8f95f00e62a6106298b2708651e95d
openldap-2.3.43-27.el5_10.i386.rpm	SHA-256: d4088888a630f8030c9505663cddb478b24fae349fa1431a6836ceb5f28f9bf1
openldap-clients-2.3.43-27.el5_10.i386.rpm	SHA-256: 6b1cade783fda31489321b2901bcc8f99727986364c978879f629c351b296302
openldap-debuginfo-2.3.43-27.el5_10.i386.rpm	SHA-256: f70dbc9a6ee30ce7df4d2c4b70c2e8e16b6de5f94e9e751c0ca791a2e16a1400
openldap-debuginfo-2.3.43-27.el5_10.i386.rpm	SHA-256: f70dbc9a6ee30ce7df4d2c4b70c2e8e16b6de5f94e9e751c0ca791a2e16a1400
openldap-devel-2.3.43-27.el5_10.i386.rpm	SHA-256: ab5d704e42065a488508d82d521d00403a243a0a53c0a355af1aeac79d41aa06
openldap-servers-2.3.43-27.el5_10.i386.rpm	SHA-256: da52f44189e8410f0285f18abc77ac655de72889d0cb614d56496c52dae2cb26
openldap-servers-overlays-2.3.43-27.el5_10.i386.rpm	SHA-256: c783d92eeeadce526e290f4ad318155e97bf454867555b2b0ea4b457316613be
openldap-servers-sql-2.3.43-27.el5_10.i386.rpm	SHA-256: bbebfe5e2a8770b8d56ce92dad4e47f75a56db18b1b84b87bab8e5aed97623a6

Red Hat Enterprise Linux Desktop 5

SRPM
openldap-2.3.43-27.el5_10.src.rpm	SHA-256: c6c3924cc20b1edc21e12129e4ef937f792cb5c29c05d3ef66d4d81b57b8f372
x86_64
compat-openldap-2.3.43_2.2.29-27.el5_10.i386.rpm	SHA-256: 370d3f1ce2669cb39a151c89e5915f38bf8f95f00e62a6106298b2708651e95d
compat-openldap-2.3.43_2.2.29-27.el5_10.x86_64.rpm	SHA-256: dc2c6c43f38905c09a06e380c8c5244eca0f35927d7e080ace57ed05a86a83af
openldap-2.3.43-27.el5_10.i386.rpm	SHA-256: d4088888a630f8030c9505663cddb478b24fae349fa1431a6836ceb5f28f9bf1
openldap-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 9722e915a0933b6978cd463127deeac89c44e49a6e04f0d9bc639d7a91d407eb
openldap-clients-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 168312fa0fea53ba6883b3d44b8fabb00f6c07ee98516af33488ec3d964f3a3a
openldap-debuginfo-2.3.43-27.el5_10.i386.rpm	SHA-256: f70dbc9a6ee30ce7df4d2c4b70c2e8e16b6de5f94e9e751c0ca791a2e16a1400
openldap-debuginfo-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 4e1144b6964910ec899d3e9d1dbffa31f71ba09d27828615c0e985b1a3a2cecd
i386
compat-openldap-2.3.43_2.2.29-27.el5_10.i386.rpm	SHA-256: 370d3f1ce2669cb39a151c89e5915f38bf8f95f00e62a6106298b2708651e95d
openldap-2.3.43-27.el5_10.i386.rpm	SHA-256: d4088888a630f8030c9505663cddb478b24fae349fa1431a6836ceb5f28f9bf1
openldap-clients-2.3.43-27.el5_10.i386.rpm	SHA-256: 6b1cade783fda31489321b2901bcc8f99727986364c978879f629c351b296302
openldap-debuginfo-2.3.43-27.el5_10.i386.rpm	SHA-256: f70dbc9a6ee30ce7df4d2c4b70c2e8e16b6de5f94e9e751c0ca791a2e16a1400

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
openldap-2.3.43-27.el5_10.src.rpm	SHA-256: c6c3924cc20b1edc21e12129e4ef937f792cb5c29c05d3ef66d4d81b57b8f372
s390x
compat-openldap-2.3.43_2.2.29-27.el5_10.s390.rpm	SHA-256: a1340f3d3ea12ed31bbbc458432752c3cf369c5c3ef506f85e2fde19b89a910e
compat-openldap-2.3.43_2.2.29-27.el5_10.s390x.rpm	SHA-256: 44c074765323c1257172ed37e597f079468e7c70b6995acb8659010c4574267c
openldap-2.3.43-27.el5_10.s390.rpm	SHA-256: 55d083460d776e005b749074d4f9b2c042c78b84eed10ed47e0301fce76d6ae8
openldap-2.3.43-27.el5_10.s390x.rpm	SHA-256: 6e1c2ae941056b02d1bae841e43fc5e8acb3a036dd62d1c35b0d868642b7bbb5
openldap-clients-2.3.43-27.el5_10.s390x.rpm	SHA-256: 7657b184cec92df3dc7f2437f2c5d94e2fbbf800a80c4266370e36a1b7105163
openldap-debuginfo-2.3.43-27.el5_10.s390.rpm	SHA-256: c4cf4d5c1f28f115baf5841cb63cb55ca884140b7c471ba8b8c076718ccd4e70
openldap-debuginfo-2.3.43-27.el5_10.s390x.rpm	SHA-256: d5d9949ce24e8089ea3b7c2a5d95ebd37b32416a936b8fda6e7c7af41b33fde8
openldap-devel-2.3.43-27.el5_10.s390.rpm	SHA-256: 0c29b262fa95a5e2d9b6d626fa5ed85a4843a71d64011f0f6947f34f441a80d4
openldap-devel-2.3.43-27.el5_10.s390x.rpm	SHA-256: c95214150a88248a83f501a318cd5f6bdd1c5dc7433f5606aaf323bad5471645
openldap-servers-2.3.43-27.el5_10.s390x.rpm	SHA-256: a2a5bf740f9479f9e7ce1869f42cd2dc5c387bbf5b2488b03d709d10df99a67f
openldap-servers-overlays-2.3.43-27.el5_10.s390x.rpm	SHA-256: d73d536cd11aa04f98073d56c310c304dfdaf1dc2429781d19be2a7f23c503c9
openldap-servers-sql-2.3.43-27.el5_10.s390x.rpm	SHA-256: ced06629f3afb1010540cc3006c16dba32cc60ba9b7de9222eeb7eb9674cf6bd

Red Hat Enterprise Linux for Power, big endian 5

SRPM
openldap-2.3.43-27.el5_10.src.rpm	SHA-256: c6c3924cc20b1edc21e12129e4ef937f792cb5c29c05d3ef66d4d81b57b8f372
ppc
compat-openldap-2.3.43_2.2.29-27.el5_10.ppc.rpm	SHA-256: 9647e38fbd35960dc314d8a29e2005b1dc6a386068127a47d0c0e65f3f32afa5
compat-openldap-2.3.43_2.2.29-27.el5_10.ppc64.rpm	SHA-256: acdd3e6ba7d6a25eccb7e8a08b0eab88e3da2f2d33d72ab46e76675380e80b66
openldap-2.3.43-27.el5_10.ppc.rpm	SHA-256: cbc0cb3f06ba735ddec760cf75d843204d584564d2fb7833a5470caafffdc470
openldap-2.3.43-27.el5_10.ppc64.rpm	SHA-256: 0c988c7607fd4758bb38dfb34bfd8e68d3d0a1a90ac786a75910abb6ae34b904
openldap-clients-2.3.43-27.el5_10.ppc.rpm	SHA-256: 7c0af2a5b946bb5e97676a639e2594ad9ef1aac2f9454a647c70d10ab874f697
openldap-debuginfo-2.3.43-27.el5_10.ppc.rpm	SHA-256: 02ac2db0aa623b1fd29a18a0893b5620c805e2d2adda364617536c13edb1eac4
openldap-debuginfo-2.3.43-27.el5_10.ppc64.rpm	SHA-256: e95f5de2c3711cd9a34a72636d87b5c23e8427f317331ebd60142585325d939f
openldap-devel-2.3.43-27.el5_10.ppc.rpm	SHA-256: 0c3f8c1a8ab51f8bb48fcd7bdb2647269868fce4d8a9f370b357aa4dd55a2892
openldap-devel-2.3.43-27.el5_10.ppc64.rpm	SHA-256: 736dec035596f3856e8c3de6baa6ed7919ac9db445030223b46d7dd3636bf14c
openldap-servers-2.3.43-27.el5_10.ppc.rpm	SHA-256: 855051ebfa3159a82517c34142af99924c0c6a0d7a292510de0d9dea9bcea4a3
openldap-servers-overlays-2.3.43-27.el5_10.ppc.rpm	SHA-256: 68fc5f641f6c7c4982c7a8e308ee8d5f1f4e1175f260326b15cfe2c8d92f6f8a
openldap-servers-sql-2.3.43-27.el5_10.ppc.rpm	SHA-256: 52c7eddebf0a10c7141e847457722075ce8632b907e8fc671fae27db4152f255

Red Hat Enterprise Linux Server from RHUI 5

SRPM
openldap-2.3.43-27.el5_10.src.rpm	SHA-256: c6c3924cc20b1edc21e12129e4ef937f792cb5c29c05d3ef66d4d81b57b8f372
x86_64
compat-openldap-2.3.43_2.2.29-27.el5_10.i386.rpm	SHA-256: 370d3f1ce2669cb39a151c89e5915f38bf8f95f00e62a6106298b2708651e95d
compat-openldap-2.3.43_2.2.29-27.el5_10.x86_64.rpm	SHA-256: dc2c6c43f38905c09a06e380c8c5244eca0f35927d7e080ace57ed05a86a83af
openldap-2.3.43-27.el5_10.i386.rpm	SHA-256: d4088888a630f8030c9505663cddb478b24fae349fa1431a6836ceb5f28f9bf1
openldap-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 9722e915a0933b6978cd463127deeac89c44e49a6e04f0d9bc639d7a91d407eb
openldap-clients-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 168312fa0fea53ba6883b3d44b8fabb00f6c07ee98516af33488ec3d964f3a3a
openldap-debuginfo-2.3.43-27.el5_10.i386.rpm	SHA-256: f70dbc9a6ee30ce7df4d2c4b70c2e8e16b6de5f94e9e751c0ca791a2e16a1400
openldap-debuginfo-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 4e1144b6964910ec899d3e9d1dbffa31f71ba09d27828615c0e985b1a3a2cecd
openldap-devel-2.3.43-27.el5_10.i386.rpm	SHA-256: ab5d704e42065a488508d82d521d00403a243a0a53c0a355af1aeac79d41aa06
openldap-devel-2.3.43-27.el5_10.x86_64.rpm	SHA-256: ae73d17cd666ed65febac6f7c2d82ffb2c8f8c922d3c87dec011feb0e0d20a44
openldap-servers-2.3.43-27.el5_10.x86_64.rpm	SHA-256: f160b480897c2acb3105573246307680a3cbfa190d729a0859fe87e76abdd4f8
openldap-servers-overlays-2.3.43-27.el5_10.x86_64.rpm	SHA-256: a4b75ccbdb9818754359f3771c2125881bf5ce111cb3348f299236ca3bbc4b25
openldap-servers-sql-2.3.43-27.el5_10.x86_64.rpm	SHA-256: 005ce79a3ba69cab5bb0d474c4546675e2bd92dfe5828bd4a2760904950d2bcd
i386
compat-openldap-2.3.43_2.2.29-27.el5_10.i386.rpm	SHA-256: 370d3f1ce2669cb39a151c89e5915f38bf8f95f00e62a6106298b2708651e95d
openldap-2.3.43-27.el5_10.i386.rpm	SHA-256: d4088888a630f8030c9505663cddb478b24fae349fa1431a6836ceb5f28f9bf1
openldap-clients-2.3.43-27.el5_10.i386.rpm	SHA-256: 6b1cade783fda31489321b2901bcc8f99727986364c978879f629c351b296302
openldap-debuginfo-2.3.43-27.el5_10.i386.rpm	SHA-256: f70dbc9a6ee30ce7df4d2c4b70c2e8e16b6de5f94e9e751c0ca791a2e16a1400
openldap-devel-2.3.43-27.el5_10.i386.rpm	SHA-256: ab5d704e42065a488508d82d521d00403a243a0a53c0a355af1aeac79d41aa06
openldap-servers-2.3.43-27.el5_10.i386.rpm	SHA-256: da52f44189e8410f0285f18abc77ac655de72889d0cb614d56496c52dae2cb26
openldap-servers-overlays-2.3.43-27.el5_10.i386.rpm	SHA-256: c783d92eeeadce526e290f4ad318155e97bf454867555b2b0ea4b457316613be
openldap-servers-sql-2.3.43-27.el5_10.i386.rpm	SHA-256: bbebfe5e2a8770b8d56ce92dad4e47f75a56db18b1b84b87bab8e5aed97623a6