Skip to content
OpenAdvisories
Unscored RHSA-2005:767 2 CVEs

Red Hat Security Advisory: openldap and nss_ldap security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 36

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as compat-openldap 0:2.1.30-4
Red Hat · RHEL 4 enterprise_linux:4::as nss_ldap 0:226-10
Red Hat · RHEL 4 enterprise_linux:4::as nss_ldap-debuginfo 0:226-10
Red Hat · RHEL 4 enterprise_linux:4::as openldap 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::as openldap-clients 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::as openldap-debuginfo 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::as openldap-devel 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::as openldap-servers 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::as openldap-servers-sql 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::desktop compat-openldap 0:2.1.30-4
Red Hat · RHEL 4 enterprise_linux:4::desktop nss_ldap 0:226-10
Red Hat · RHEL 4 enterprise_linux:4::desktop nss_ldap-debuginfo 0:226-10
Red Hat · RHEL 4 enterprise_linux:4::desktop openldap 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::desktop openldap-clients 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::desktop openldap-debuginfo 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::desktop openldap-devel 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::desktop openldap-servers 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::desktop openldap-servers-sql 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::es compat-openldap 0:2.1.30-4
Red Hat · RHEL 4 enterprise_linux:4::es nss_ldap 0:226-10
Red Hat · RHEL 4 enterprise_linux:4::es nss_ldap-debuginfo 0:226-10
Red Hat · RHEL 4 enterprise_linux:4::es openldap 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::es openldap-clients 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::es openldap-debuginfo 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::es openldap-devel 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::es openldap-servers 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::es openldap-servers-sql 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::ws compat-openldap 0:2.1.30-4
Red Hat · RHEL 4 enterprise_linux:4::ws nss_ldap 0:226-10
Red Hat · RHEL 4 enterprise_linux:4::ws nss_ldap-debuginfo 0:226-10
Red Hat · RHEL 4 enterprise_linux:4::ws openldap 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::ws openldap-clients 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::ws openldap-debuginfo 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::ws openldap-devel 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::ws openldap-servers 0:2.2.13-4
Red Hat · RHEL 4 enterprise_linux:4::ws openldap-servers-sql 0:2.2.13-4

Vulnerabilities 2

  • Unscored —
    CVE-2005-2069

    pam_ldap and nss_ldap, when used with OpenLDAP and connecting to a slave using TLS, does not use TLS for the subsequent…

    libpam-ldap libnss-ldap Debian
  • Unscored —
    CVE-2005-2641

    Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow …

    libpam-ldap Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=159151
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=162482
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=166163
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_767.json
  • report
    https://access.redhat.com/security/cve/CVE-2005-2069
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617681
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-2069
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-2069
  • report
    https://access.redhat.com/security/cve/CVE-2005-2641
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617737
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-2641
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-2641