Oval Definition:oval:com.redhat.rhsa:def:20151840
Revision Date:2015-09-29Version:637
Title:RHSA-2015:1840: openldap security update (Important)
Description:OpenLDAP is an open source suite of Lightweight Directory Access Protocol (LDAP) applications and development tools. LDAP is a set of protocols used to access and maintain distributed directory information services over an IP network. The openldap package contains configuration files, libraries, and documentation for OpenLDAP.

  • A flaw was found in the way the OpenLDAP server daemon (slapd) parsed certain Basic Encoding Rules (BER) data. A remote attacker could use this flaw to crash slapd via a specially crafted packet. (CVE-2015-6908)

    All openldap users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2015-6908
    RHSA-2015:1840
    RHSA-2015:1840-00
    RHSA-2015:1840-01
    Platform(s):Red Hat Enterprise Linux 5
    Red Hat Enterprise Linux 6
    Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • compat-openldap is earlier than 0:2.3.43_2.2.29-29.el5_11
  • AND compat-openldap is signed with Red Hat redhatrelease2 key
  • openldap is earlier than 0:2.3.43-29.el5_11
  • AND openldap is signed with Red Hat redhatrelease2 key
  • openldap-clients is earlier than 0:2.3.43-29.el5_11
  • AND openldap-clients is signed with Red Hat redhatrelease2 key
  • openldap-devel is earlier than 0:2.3.43-29.el5_11
  • AND openldap-devel is signed with Red Hat redhatrelease2 key
  • openldap-servers is earlier than 0:2.3.43-29.el5_11
  • AND openldap-servers is signed with Red Hat redhatrelease2 key
  • openldap-servers-overlays is earlier than 0:2.3.43-29.el5_11
  • AND openldap-servers-overlays is signed with Red Hat redhatrelease2 key
  • openldap-servers-sql is earlier than 0:2.3.43-29.el5_11
  • AND openldap-servers-sql is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • openldap is earlier than 0:2.4.40-6.el6_7
  • AND openldap is signed with Red Hat redhatrelease2 key
  • openldap-clients is earlier than 0:2.4.40-6.el6_7
  • AND openldap-clients is signed with Red Hat redhatrelease2 key
  • openldap-devel is earlier than 0:2.4.40-6.el6_7
  • AND openldap-devel is signed with Red Hat redhatrelease2 key
  • openldap-servers is earlier than 0:2.4.40-6.el6_7
  • AND openldap-servers is signed with Red Hat redhatrelease2 key
  • openldap-servers-sql is earlier than 0:2.4.40-6.el6_7
  • AND openldap-servers-sql is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • openldap is earlier than 0:2.4.39-7.el7_1
  • AND openldap is signed with Red Hat redhatrelease2 key
  • openldap-clients is earlier than 0:2.4.39-7.el7_1
  • AND openldap-clients is signed with Red Hat redhatrelease2 key
  • openldap-devel is earlier than 0:2.4.39-7.el7_1
  • AND openldap-devel is signed with Red Hat redhatrelease2 key
  • openldap-servers is earlier than 0:2.4.39-7.el7_1
  • AND openldap-servers is signed with Red Hat redhatrelease2 key
  • openldap-servers-sql is earlier than 0:2.4.39-7.el7_1
  • AND openldap-servers-sql is signed with Red Hat redhatrelease2 key
  • Definition Synopsis
  • Release Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • compat-openldap is earlier than 0:2.3.43_2.2.29-29.el5_11
  • AND compat-openldap is signed with Red Hat redhatrelease key
  • openldap is earlier than 0:2.3.43-29.el5_11
  • AND openldap is signed with Red Hat redhatrelease key
  • openldap-clients is earlier than 0:2.3.43-29.el5_11
  • AND openldap-clients is signed with Red Hat redhatrelease key
  • openldap-devel is earlier than 0:2.3.43-29.el5_11
  • AND openldap-devel is signed with Red Hat redhatrelease key
  • openldap-servers is earlier than 0:2.3.43-29.el5_11
  • AND openldap-servers is signed with Red Hat redhatrelease key
  • openldap-servers-overlays is earlier than 0:2.3.43-29.el5_11
  • AND openldap-servers-overlays is signed with Red Hat redhatrelease key
  • openldap-servers-sql is earlier than 0:2.3.43-29.el5_11
  • AND openldap-servers-sql is signed with Red Hat redhatrelease key
  • OR Package Information
  • Red Hat Enterprise Linux 6 Client is installed
  • OR Red Hat Enterprise Linux 6 Server is installed
  • OR Red Hat Enterprise Linux 6 Workstation is installed
  • OR Red Hat Enterprise Linux 6 ComputeNode is installed
  • AND
  • openldap is earlier than 0:2.4.40-6.el6_7
  • AND openldap is signed with Red Hat redhatrelease2 key
  • openldap-clients is earlier than 0:2.4.40-6.el6_7
  • AND openldap-clients is signed with Red Hat redhatrelease2 key
  • openldap-devel is earlier than 0:2.4.40-6.el6_7
  • AND openldap-devel is signed with Red Hat redhatrelease2 key
  • openldap-servers is earlier than 0:2.4.40-6.el6_7
  • AND openldap-servers is signed with Red Hat redhatrelease2 key
  • openldap-servers-sql is earlier than 0:2.4.40-6.el6_7
  • AND openldap-servers-sql is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 7 Client is installed
  • OR Red Hat Enterprise Linux 7 Server is installed
  • OR Red Hat Enterprise Linux 7 Workstation is installed
  • OR Red Hat Enterprise Linux 7 ComputeNode is installed
  • AND
  • openldap is earlier than 0:2.4.39-7.el7_1
  • AND openldap is signed with Red Hat redhatrelease2 key
  • openldap-clients is earlier than 0:2.4.39-7.el7_1
  • AND openldap-clients is signed with Red Hat redhatrelease2 key
  • openldap-devel is earlier than 0:2.4.39-7.el7_1
  • AND openldap-devel is signed with Red Hat redhatrelease2 key
  • openldap-servers is earlier than 0:2.4.39-7.el7_1
  • AND openldap-servers is signed with Red Hat redhatrelease2 key
  • openldap-servers-sql is earlier than 0:2.4.39-7.el7_1
  • AND openldap-servers-sql is signed with Red Hat redhatrelease2 key
  • BACK