[ MDKSA-2006:096 ] - Updated openldap packages fixes buffer overflow vulnerability.
To: [email protected]
Subject: [ MDKSA-2006:096 ] - Updated openldap packages fixes buffer overflow vulnerability.
Date: Wed, 7 Jun 2006 13:01:00 -0600
From: [email protected]
Reply-To: <xsecurity@mandriva.com.>
Message-Id: <E1Fo3H2-0004s8-GR@mercury.mandriva.com.>
Sender: QATeam User <qateam@mercury.mandriva.com.>
X-Virus-Scanned: antivirus-gw at tyumen.ru
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDKSA-2006:096
http://www.mandriva.com/security/
_______________________________________________________________________
Package : openldap
Date : June 7, 2006
Affected: 10.2, 2006.0, Corporate 3.0
_______________________________________________________________________
Problem Description:
A stack-based buffer overflow in st.c in slurpd for OpenLDAP might allow
attackers to execute arbitrary code via a long hostname.
Packages have been patched to correct this issue.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2754
_______________________________________________________________________
Updated Packages:
Mandriva Linux 10.2:
8a281bec432238a1f5b551ca9512bbe4 10.2/RPMS/libldap2.2_7-2.2.23-5.2.102mdk.i586.rpm
8da883025099c4a0a2d84e231537eb06 10.2/RPMS/libldap2.2_7-devel-2.2.23-5.2.102mdk.i586.rpm
e3d33c67cde6e42954855597bc8cbeb7 10.2/RPMS/libldap2.2_7-static-devel-2.2.23-5.2.102mdk.i586.rpm
39d447d7cfe1905f367866106e0a93c3 10.2/RPMS/openldap-2.2.23-5.2.102mdk.i586.rpm
7cf3ba7abc86585f2b20643a5534bc3e 10.2/RPMS/openldap-clients-2.2.23-5.2.102mdk.i586.rpm
0a392204252086e1f69e66a743651370 10.2/RPMS/openldap-doc-2.2.23-5.2.102mdk.i586.rpm
8e30d69b6f1d7a089f1f7888be736152 10.2/RPMS/openldap-migration-2.2.23-5.2.102mdk.i586.rpm
5721773fc4cb14db7cbd86ec80fa2026 10.2/RPMS/openldap-servers-2.2.23-5.2.102mdk.i586.rpm
d8ef3d7bf845b64d066ef932f7cef9ad 10.2/SRPMS/openldap-2.2.23-5.2.102mdk.src.rpm
Mandriva Linux 10.2/X86_64:
98a53d8c9a96b099e2870e5bcdbe70cc x86_64/10.2/RPMS/lib64ldap2.2_7-2.2.23-5.2.102mdk.x86_64.rpm
8c0b72d44fc6286ef03740166a5fed0c x86_64/10.2/RPMS/lib64ldap2.2_7-devel-2.2.23-5.2.102mdk.x86_64.rpm
a4e8ab2d4bdc1f9bc150197d1d28eba3 x86_64/10.2/RPMS/lib64ldap2.2_7-static-devel-2.2.23-5.2.102mdk.x86_64.rpm
8a281bec432238a1f5b551ca9512bbe4 x86_64/10.2/RPMS/libldap2.2_7-2.2.23-5.2.102mdk.i586.rpm
8da883025099c4a0a2d84e231537eb06 x86_64/10.2/RPMS/libldap2.2_7-devel-2.2.23-5.2.102mdk.i586.rpm
e3d33c67cde6e42954855597bc8cbeb7 x86_64/10.2/RPMS/libldap2.2_7-static-devel-2.2.23-5.2.102mdk.i586.rpm
09c1d4441880e7614efd28e0ce068721 x86_64/10.2/RPMS/openldap-2.2.23-5.2.102mdk.x86_64.rpm
9705881b0d0f255782a3611de6ffb760 x86_64/10.2/RPMS/openldap-clients-2.2.23-5.2.102mdk.x86_64.rpm
1583f53a26007650c8678fa6814f03ae x86_64/10.2/RPMS/openldap-doc-2.2.23-5.2.102mdk.x86_64.rpm
7184f0b73575647b498f0590cd089493 x86_64/10.2/RPMS/openldap-migration-2.2.23-5.2.102mdk.x86_64.rpm
c1025ea947b00cdebcd419fc817597ae x86_64/10.2/RPMS/openldap-servers-2.2.23-5.2.102mdk.x86_64.rpm
d8ef3d7bf845b64d066ef932f7cef9ad x86_64/10.2/SRPMS/openldap-2.2.23-5.2.102mdk.src.rpm
Mandriva Linux 2006.0:
ea8791b7c1d68b6d909b2400fb33319f 2006.0/RPMS/libldap2.3_0-2.3.6-4.1.20060mdk.i586.rpm
703493c59b9f4d461e61ef728124005f 2006.0/RPMS/libldap2.3_0-devel-2.3.6-4.1.20060mdk.i586.rpm
9efdee4dc7c3648022d7db3ff032273e 2006.0/RPMS/libldap2.3_0-static-devel-2.3.6-4.1.20060mdk.i586.rpm
e1bea8e181354cb9491412df980a55b5 2006.0/RPMS/openldap-2.3.6-4.1.20060mdk.i586.rpm
affa5cab856fe9a9c402136b8246cf53 2006.0/RPMS/openldap-clients-2.3.6-4.1.20060mdk.i586.rpm
5daac277569ffbac8995288ff0aeaced 2006.0/RPMS/openldap-doc-2.3.6-4.1.20060mdk.i586.rpm
a7ecd79a95ff817a349b032796332300 2006.0/RPMS/openldap-servers-2.3.6-4.1.20060mdk.i586.rpm
56f8cf3e40ab9ded4965b9e2ca528de3 2006.0/SRPMS/openldap-2.3.6-4.1.20060mdk.src.rpm
Mandriva Linux 2006.0/X86_64:
9808e28b5610e1eddd845db8ccee1f20 x86_64/2006.0/RPMS/lib64ldap2.3_0-2.3.6-4.1.20060mdk.x86_64.rpm
baf930097e1da0a4de75bfaef046025b x86_64/2006.0/RPMS/lib64ldap2.3_0-devel-2.3.6-4.1.20060mdk.x86_64.rpm
790382e365cd57aaea323be85419e512 x86_64/2006.0/RPMS/lib64ldap2.3_0-static-devel-2.3.6-4.1.20060mdk.x86_64.rpm
ea8791b7c1d68b6d909b2400fb33319f x86_64/2006.0/RPMS/libldap2.3_0-2.3.6-4.1.20060mdk.i586.rpm
703493c59b9f4d461e61ef728124005f x86_64/2006.0/RPMS/libldap2.3_0-devel-2.3.6-4.1.20060mdk.i586.rpm
9efdee4dc7c3648022d7db3ff032273e x86_64/2006.0/RPMS/libldap2.3_0-static-devel-2.3.6-4.1.20060mdk.i586.rpm
1bc7a0a1c76fda9e647061ae541c39a0 x86_64/2006.0/RPMS/openldap-2.3.6-4.1.20060mdk.x86_64.rpm
71770a09aeaf8d37b7e0c37ee5e84182 x86_64/2006.0/RPMS/openldap-clients-2.3.6-4.1.20060mdk.x86_64.rpm
40c969879aa467374342f0f8d597f564 x86_64/2006.0/RPMS/openldap-doc-2.3.6-4.1.20060mdk.x86_64.rpm
30ec0d98e7dd4a6289cb972517254ffd x86_64/2006.0/RPMS/openldap-servers-2.3.6-4.1.20060mdk.x86_64.rpm
56f8cf3e40ab9ded4965b9e2ca528de3 x86_64/2006.0/SRPMS/openldap-2.3.6-4.1.20060mdk.src.rpm
Corporate 3.0:
9f5b3d6bc1939e9cddc067b52a5c6905 corporate/3.0/RPMS/libldap2-2.1.25-7.2.C30mdk.i586.rpm
b145cedba5b300c27153caa7b35c7e33 corporate/3.0/RPMS/libldap2-devel-2.1.25-7.2.C30mdk.i586.rpm
37a25f61f47bbbde4d228784bde24813 corporate/3.0/RPMS/libldap2-devel-static-2.1.25-7.2.C30mdk.i586.rpm
290216ecd86c48f1d433572e9c854484 corporate/3.0/RPMS/openldap-2.1.25-7.2.C30mdk.i586.rpm
abdd42a6c4dc54290e03b51f57adf875 corporate/3.0/RPMS/openldap-back_dnssrv-2.1.25-7.2.C30mdk.i586.rpm
701c6b5f6462c96a8aaff141637fa242 corporate/3.0/RPMS/openldap-back_ldap-2.1.25-7.2.C30mdk.i586.rpm
0ca611e9d5a3eee7e999fc9947e09864 corporate/3.0/RPMS/openldap-back_passwd-2.1.25-7.2.C30mdk.i586.rpm
19adeb4cac1e48d9549458fe7313ff7c corporate/3.0/RPMS/openldap-back_sql-2.1.25-7.2.C30mdk.i586.rpm
41a1f32492dbc4c122e95a4dd84a0feb corporate/3.0/RPMS/openldap-clients-2.1.25-7.2.C30mdk.i586.rpm
9b9c504105bc677244d1090f8c5bb5b2 corporate/3.0/RPMS/openldap-doc-2.1.25-7.2.C30mdk.i586.rpm
f2902676cc7a397207281c829c27e6d1 corporate/3.0/RPMS/openldap-migration-2.1.25-7.2.C30mdk.i586.rpm
731c1b97a63a45ba756772760c59c6c0 corporate/3.0/RPMS/openldap-servers-2.1.25-7.2.C30mdk.i586.rpm
70f8323a5b1ee7cace35153eb8a4a977 corporate/3.0/SRPMS/openldap-2.1.25-7.2.C30mdk.src.rpm
Corporate 3.0/X86_64:
ea6b0511387ed89a04dcf814ba5d4174 x86_64/corporate/3.0/RPMS/lib64ldap2-2.1.25-7.2.C30mdk.x86_64.rpm
d5b1e13a6947c55a0e4fcce2e91b23f7 x86_64/corporate/3.0/RPMS/lib64ldap2-devel-2.1.25-7.2.C30mdk.x86_64.rpm
b4f1b6d44fd41861a75aa92aaafef04e x86_64/corporate/3.0/RPMS/lib64ldap2-devel-static-2.1.25-7.2.C30mdk.x86_64.rpm
08dfbb1f3eac003c4635031295cc791f x86_64/corporate/3.0/RPMS/openldap-2.1.25-7.2.C30mdk.x86_64.rpm
ca206f54b9573076cee3a7eaabadd418 x86_64/corporate/3.0/RPMS/openldap-back_dnssrv-2.1.25-7.2.C30mdk.x86_64.rpm
aa7ee91e2f51298c19b1d13c643c1a3c x86_64/corporate/3.0/RPMS/openldap-back_ldap-2.1.25-7.2.C30mdk.x86_64.rpm
76388eb3fb21ad49c5f60deb309f8055 x86_64/corporate/3.0/RPMS/openldap-back_passwd-2.1.25-7.2.C30mdk.x86_64.rpm
44d4127e8a071b4a4384e5e5d00abdb6 x86_64/corporate/3.0/RPMS/openldap-back_sql-2.1.25-7.2.C30mdk.x86_64.rpm
afc55cc7cc9b5b1d2d0d78328c71cef6 x86_64/corporate/3.0/RPMS/openldap-clients-2.1.25-7.2.C30mdk.x86_64.rpm
58397772050830e56cada4a725923422 x86_64/corporate/3.0/RPMS/openldap-doc-2.1.25-7.2.C30mdk.x86_64.rpm
a63018c5425a741cd9161efff32f1e06 x86_64/corporate/3.0/RPMS/openldap-migration-2.1.25-7.2.C30mdk.x86_64.rpm
138f61cb6117553b8766ef1a806f07bc x86_64/corporate/3.0/RPMS/openldap-servers-2.1.25-7.2.C30mdk.x86_64.rpm
70f8323a5b1ee7cace35153eb8a4a977 x86_64/corporate/3.0/SRPMS/openldap-2.1.25-7.2.C30mdk.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
iD8DBQFEhvVFmqjQ0CJFipgRAszgAKDF5Bl+BgkyHnaMppav3WI/uJmz4QCfaNge
l2DoN62/BEFgeRSGdhx7ifw=
=J1DU
-----END PGP SIGNATURE-----
