Skip to content
OpenAdvisories
Unscored RHSA-2015:1840 1 CVE

Red Hat Security Advisory: openldap security update

Published Sep 15, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 66

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client compat-openldap 0:2.3.43_2.2.29-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client openldap 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client openldap-clients 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client openldap-debuginfo 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openldap 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openldap-debuginfo 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openldap-devel 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openldap-servers 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openldap-servers-overlays 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openldap-servers-sql 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server compat-openldap 0:2.3.43_2.2.29-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server openldap 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server openldap-clients 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server openldap-debuginfo 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server openldap-devel 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server openldap-servers 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server openldap-servers-overlays 0:2.3.43-29.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server openldap-servers-sql 0:2.3.43-29.el5_11
Red Hat · RHEL 6 enterprise_linux:6::client openldap 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client openldap-clients 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client openldap-debuginfo 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client openldap-devel 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client openldap-servers 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client openldap-servers-sql 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode openldap 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode openldap-clients 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode openldap-debuginfo 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode openldap-devel 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode openldap-servers 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode openldap-servers-sql 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server openldap 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server openldap-clients 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server openldap-debuginfo 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server openldap-devel 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server openldap-servers 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server openldap-servers-sql 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation openldap 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation openldap-clients 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation openldap-debuginfo 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation openldap-devel 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation openldap-servers 0:2.4.40-6.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation openldap-servers-sql 0:2.4.40-6.el6_7
Red Hat · RHEL 7 enterprise_linux:7::client openldap 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client openldap-clients 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client openldap-debuginfo 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client openldap-devel 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client openldap-servers 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client openldap-servers-sql 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode openldap 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode openldap-clients 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode openldap-debuginfo 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode openldap-devel 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode openldap-servers 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode openldap-servers-sql 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server openldap 0:2.4.39-7.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server openldap-clients 0:2.4.39-7.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server openldap-debuginfo 0:2.4.39-7.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server openldap-devel 0:2.4.39-7.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server openldap-servers 0:2.4.39-7.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server openldap-servers-sql 0:2.4.39-7.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::workstation openldap 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation openldap-clients 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation openldap-debuginfo 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation openldap-devel 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation openldap-servers 0:2.4.39-7.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation openldap-servers-sql 0:2.4.39-7.el7_1

Vulnerabilities 1

  • Unscored —
    CVE-2015-6908 Public exploit EPSS 19%

    The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a d…

    openldap openldap Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1262393
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1840.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-6908
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-6908
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-6908