Уведомление безопасности DSA-1943

Высокая (6.8)

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

Debian

ldap-utils (any) libldap-2.3-0 (any) libldap-2.4-2 (any) libldap-2.4-2-dbg (any) libldap2-dev (any) slapd (any) slapd-dbg (any)

Уведомление безопасности об уязвимостях slapd-dbg, libldap-2.4-2, libldap-2.4-2-dbg, libldap-2.3-0, ldap-utils, libldap2-dev, slapd

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
ldap-utils - 2.3.30-5+etch3
libldap-2.3-0 - 2.3.30-5+etch3
slapd - 2.3.30-5+etch3
s390x:
libldap-2.3-0 - 2.3.30-5+etch3
ldap-utils - 2.3.30-5+etch3
slapd - 2.3.30-5+etch3
i686:
slapd - 2.3.30-5+etch3
ldap-utils - 2.3.30-5+etch3
libldap-2.3-0 - 2.3.30-5+etch3
arm:
slapd - 2.3.30-5+etch3
libldap-2.3-0 - 2.3.30-5+etch3
ldap-utils - 2.3.30-5+etch3
sparc:
slapd - 2.3.30-5+etch3
ldap-utils - 2.3.30-5+etch3
libldap-2.3-0 - 2.3.30-5+etch3
x86-64:
libldap-2.3-0 - 2.3.30-5+etch3
slapd - 2.3.30-5+etch3
ldap-utils - 2.3.30-5+etch3
alpha:
libldap-2.3-0 - 2.3.30-5+etch3
slapd - 2.3.30-5+etch3
ldap-utils - 2.3.30-5+etch3
ia64:
ldap-utils - 2.3.30-5+etch3
libldap-2.3-0 - 2.3.30-5+etch3
slapd - 2.3.30-5+etch3
mips:
libldap-2.3-0 - 2.3.30-5+etch3
ldap-utils - 2.3.30-5+etch3
slapd - 2.3.30-5+etch3
mipsel:
libldap-2.3-0 - 2.3.30-5+etch3
ldap-utils - 2.3.30-5+etch3
slapd - 2.3.30-5+etch3
hppa:
slapd - 2.3.30-5+etch3
libldap-2.3-0 - 2.3.30-5+etch3
ldap-utils - 2.3.30-5+etch3
Debian GNU/Linux 5:
ppc:
slapd-dbg - 2.4.11-1+lenny1
libldap-2.4-2-dbg - 2.4.11-1+lenny1
libldap-2.4-2 - 2.4.11-1+lenny1
slapd - 2.4.11-1+lenny1
libldap2-dev - 2.4.11-1+lenny1
ldap-utils - 2.4.11-1+lenny1
i686:
libldap-2.4-2 - 2.4.11-1+lenny1
libldap-2.4-2-dbg - 2.4.11-1+lenny1
libldap2-dev - 2.4.11-1+lenny1
slapd-dbg - 2.4.11-1+lenny1
ldap-utils - 2.4.11-1+lenny1
slapd - 2.4.11-1+lenny1
arm:
libldap-2.4-2-dbg - 2.4.11-1+lenny1
ldap-utils - 2.4.11-1+lenny1
libldap2-dev - 2.4.11-1+lenny1
slapd - 2.4.11-1+lenny1
libldap-2.4-2 - 2.4.11-1+lenny1
slapd-dbg - 2.4.11-1+lenny1
sparc:
libldap2-dev - 2.4.11-1+lenny1
ldap-utils - 2.4.11-1+lenny1
slapd - 2.4.11-1+lenny1
libldap-2.4-2-dbg - 2.4.11-1+lenny1
libldap-2.4-2 - 2.4.11-1+lenny1
slapd-dbg - 2.4.11-1+lenny1
x86-64:
slapd - 2.4.11-1+lenny1
libldap-2.4-2-dbg - 2.4.11-1+lenny1
ldap-utils - 2.4.11-1+lenny1
libldap2-dev - 2.4.11-1+lenny1
slapd-dbg - 2.4.11-1+lenny1
libldap-2.4-2 - 2.4.11-1+lenny1
alpha:
slapd-dbg - 2.4.11-1+lenny1
libldap-2.4-2 - 2.4.11-1+lenny1
ldap-utils - 2.4.11-1+lenny1
slapd - 2.4.11-1+lenny1
libldap2-dev - 2.4.11-1+lenny1
libldap-2.4-2-dbg - 2.4.11-1+lenny1
ia64:
slapd-dbg - 2.4.11-1+lenny1
libldap2-dev - 2.4.11-1+lenny1
ldap-utils - 2.4.11-1+lenny1
libldap-2.4-2-dbg - 2.4.11-1+lenny1
libldap-2.4-2 - 2.4.11-1+lenny1
slapd - 2.4.11-1+lenny1
mips:
slapd-dbg - 2.4.11-1+lenny1
libldap-2.4-2 - 2.4.11-1+lenny1
ldap-utils - 2.4.11-1+lenny1
libldap2-dev - 2.4.11-1+lenny1
slapd - 2.4.11-1+lenny1
libldap-2.4-2-dbg - 2.4.11-1+lenny1
hppa:
slapd - 2.4.11-1+lenny1
slapd-dbg - 2.4.11-1+lenny1
libldap-2.4-2 - 2.4.11-1+lenny1
libldap-2.4-2-dbg - 2.4.11-1+lenny1
ldap-utils - 2.4.11-1+lenny1
libldap2-dev - 2.4.11-1+lenny1

http://www.debian.org/security/dsa-1943/

Источник: CVE
Наименование: CVE-2009-3767
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3767