Summary
[2.4.44-5]
- fix CVE-2017-9287 openldap: Double free vulnerability in servers/slapd/back-mdb/search.c (#1458210)
[2.4.44-4]
- NSS: Include some CHACHA20POLY1305 ciphers (#1432907)
[2.4.44-3]
- NSS: re-register NSS_Shutdown callback (#1405354)
[2.4.44-2]
- Include MDB tools in openldap-servers (#1428740)
[2.4.44-1]
- Rebase to openldap-2.4.44 (#1386365)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | openldap | 0:2.4.44-5.el7 |
| Oracle Linux · 7 | openldap-clients | 0:2.4.44-5.el7 |
| Oracle Linux · 7 | openldap-devel | 0:2.4.44-5.el7 |
| Oracle Linux · 7 | openldap-servers | 0:2.4.44-5.el7 |
| Oracle Linux · 7 | openldap-servers-sql | 0:2.4.44-5.el7 |
Vulnerabilities 1
-
Unscored —
servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access …