Skip to content
OpenAdvisories
Unscored RHSA-2010:0543 2 CVEs

Red Hat Security Advisory: openldap security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as compat-openldap 0:2.1.30-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::as openldap 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::as openldap-clients 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::as openldap-debuginfo 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::as openldap-devel 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::as openldap-servers 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::as openldap-servers-sql 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop compat-openldap 0:2.1.30-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop openldap 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop openldap-clients 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop openldap-debuginfo 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop openldap-devel 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop openldap-servers 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::desktop openldap-servers-sql 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es compat-openldap 0:2.1.30-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es openldap 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es openldap-clients 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es openldap-debuginfo 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es openldap-devel 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es openldap-servers 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::es openldap-servers-sql 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws compat-openldap 0:2.1.30-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws openldap 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws openldap-clients 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws openldap-debuginfo 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws openldap-devel 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws openldap-servers 0:2.2.13-12.el4_8.3
Red Hat · RHEL 4 enterprise_linux:4::ws openldap-servers-sql 0:2.2.13-12.el4_8.3

Vulnerabilities 2

  • Unscored —
    CVE-2009-3767

    libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly…

    openldap Debian
  • Unscored —
    CVE-2010-0211 Public exploit EPSS 28%

    The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_norma…

    openldap Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530715
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=605448
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0543.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-3767
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3767
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3767
  • report
    https://access.redhat.com/security/cve/CVE-2010-0211
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0211
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0211