Scientific Linux alert SLSA-2015:1840-1 (openldap)

From:
    	     
 
Pat Riehecky <riehecky@fnal.gov> 
To:
    	     
 
<scientific-linux-errata@listserv.fnal.gov> 
Subject:
    	     
 
Security ERRATA Important: openldap on SL5.x, SL6.x, SL7.x i386/x86_64 
Date:
    	     
 
Tue, 29 Sep 2015 13:52:16 +0000
Message-ID:
    	     
 
<20150929135216.5108.48941@slpackages.fnal.gov>
Synopsis:          Important: openldap security update
Advisory ID:       SLSA-2015:1840-1
Issue Date:        2015-09-29
CVE Numbers:       CVE-2015-6908
--

A flaw was found in the way the OpenLDAP server daemon (slapd) parsed
certain Basic Encoding Rules (BER) data. A remote attacker could use this
flaw to crash slapd via a specially crafted packet. (CVE-2015-6908)
--

SL5
  x86_64
    compat-openldap-2.3.43_2.2.29-29.el5_11.i386.rpm
    compat-openldap-2.3.43_2.2.29-29.el5_11.x86_64.rpm
    openldap-2.3.43-29.el5_11.i386.rpm
    openldap-2.3.43-29.el5_11.x86_64.rpm
    openldap-clients-2.3.43-29.el5_11.x86_64.rpm
    openldap-debuginfo-2.3.43-29.el5_11.i386.rpm
    openldap-debuginfo-2.3.43-29.el5_11.x86_64.rpm
    openldap-devel-2.3.43-29.el5_11.i386.rpm
    openldap-devel-2.3.43-29.el5_11.x86_64.rpm
    openldap-servers-2.3.43-29.el5_11.x86_64.rpm
    openldap-servers-overlays-2.3.43-29.el5_11.x86_64.rpm
    openldap-servers-sql-2.3.43-29.el5_11.x86_64.rpm
  i386
    compat-openldap-2.3.43_2.2.29-29.el5_11.i386.rpm
    openldap-2.3.43-29.el5_11.i386.rpm
    openldap-clients-2.3.43-29.el5_11.i386.rpm
    openldap-debuginfo-2.3.43-29.el5_11.i386.rpm
    openldap-devel-2.3.43-29.el5_11.i386.rpm
    openldap-servers-2.3.43-29.el5_11.i386.rpm
    openldap-servers-overlays-2.3.43-29.el5_11.i386.rpm
    openldap-servers-sql-2.3.43-29.el5_11.i386.rpm
SL6
  x86_64
    openldap-2.4.40-6.el6_7.i686.rpm
    openldap-2.4.40-6.el6_7.x86_64.rpm
    openldap-clients-2.4.40-6.el6_7.x86_64.rpm
    openldap-debuginfo-2.4.40-6.el6_7.i686.rpm
    openldap-debuginfo-2.4.40-6.el6_7.x86_64.rpm
    openldap-devel-2.4.40-6.el6_7.i686.rpm
    openldap-devel-2.4.40-6.el6_7.x86_64.rpm
    openldap-servers-2.4.40-6.el6_7.x86_64.rpm
    openldap-servers-sql-2.4.40-6.el6_7.x86_64.rpm
  i386
    openldap-2.4.40-6.el6_7.i686.rpm
    openldap-clients-2.4.40-6.el6_7.i686.rpm
    openldap-debuginfo-2.4.40-6.el6_7.i686.rpm
    openldap-devel-2.4.40-6.el6_7.i686.rpm
    openldap-servers-2.4.40-6.el6_7.i686.rpm
    openldap-servers-sql-2.4.40-6.el6_7.i686.rpm
SL7
  x86_64
    openldap-2.4.39-7.el7_1.i686.rpm
    openldap-2.4.39-7.el7_1.x86_64.rpm
    openldap-clients-2.4.39-7.el7_1.x86_64.rpm
    openldap-debuginfo-2.4.39-7.el7_1.i686.rpm
    openldap-debuginfo-2.4.39-7.el7_1.x86_64.rpm
    openldap-devel-2.4.39-7.el7_1.i686.rpm
    openldap-devel-2.4.39-7.el7_1.x86_64.rpm
    openldap-servers-2.4.39-7.el7_1.x86_64.rpm
    openldap-servers-sql-2.4.39-7.el7_1.x86_64.rpm

- Scientific Linux Development Team