Oracle alert ELSA-2012-0899 (openldap)

From:
    	     
 
Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> 
To:
    	     
 
el-errata@oss.oracle.com 
Subject:
    	     
 
[El-errata] ELSA-2012-0899 Low: Oracle Linux 6 openldap security
 and bug fix update 
Date:
    	     
 
Mon, 02 Jul 2012 19:55:06 -0700
Message-ID:
    	     
 
<4FF25F0A.9060001@oracle.com>
Archive-link:
    	     
 
Article, Thread
              
Oracle Linux Security Advisory ELSA-2012-0899

https://rhn.redhat.com/errata/RHSA-2012-0899.html

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
openldap-2.4.23-26.el6.i686.rpm
openldap-clients-2.4.23-26.el6.i686.rpm
openldap-devel-2.4.23-26.el6.i686.rpm
openldap-servers-2.4.23-26.el6.i686.rpm
openldap-servers-sql-2.4.23-26.el6.i686.rpm

x86_64:
openldap-2.4.23-26.el6.i686.rpm
openldap-2.4.23-26.el6.x86_64.rpm
openldap-clients-2.4.23-26.el6.x86_64.rpm
openldap-devel-2.4.23-26.el6.i686.rpm
openldap-devel-2.4.23-26.el6.x86_64.rpm
openldap-servers-2.4.23-26.el6.x86_64.rpm
openldap-servers-sql-2.4.23-26.el6.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/openldap-2.4.23-2...


Description of changes:

[2.4.23-26]
- fix: MozNSS CA cert dir does not work together with PEM CA cert file 
(#818844)
- fix: memory leak: def_urlpre is not freed (#816168)
- fix update: Default SSL certificate bundle is not found by openldap 
library (#742023)

[2.4.23-25]
- fix update: Default SSL certificate bundle is not found by openldap 
library (#742023)

[2.4.23-24]
- fix update: Default SSL certificate bundle is not found by openldap 
library (#742023)
- fix: memberof overlay on the frontend database causes server segfault 
(#730745)

[2.4.23-23]
- security fix: CVE-2012-1164: assertion failure by processing search 
queries
   requesting only attributes for particular entry (#813162)

[2.4.23-22]
- fix: libraries leak memory when following referrals (#807363)

[2.4.23-21]
- fix: ldapsearch crashes with invalid parameters (#743781)
- fix: replication (syncrepl) with TLS causes segfault (#783445)
- fix: openldap server in MirrorMode sometimes fails to resync via 
syncrepl (#784211)
- use portreserve to reserve LDAPS port (636/tcp+udp) (#790687)
- fix: missing options in manual pages of client tools (#745470)
- fix: SASL_NOCANON option missing in ldap.conf manual page (#732916)
- fix: slapd segfaults when certificate key cannot be loaded (#796808)
- Jan Syná?ek <jsynacek@redhat.com>
   + fix: overlay constraint with count option work bad with modify 
operation (#742163)
   + fix: Default SSL certificate bundle is not found by openldap 
library (#742023)
   + fix: Duplicate close() calls in OpenLDAP (#784203)


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata