<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="831ae47ae1402bb0b8b9727b23825a45"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2658">
  <id>dbg111-libldap-2_4-2</id>
  <title>openldap2: fixed MODRDN DoS, replicating inconsistencies and \0 character-DoS</title>
  <release>openSUSE 11.1 DEBUGINFO</release>
  <issued date="1278497447"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=612430" id="612430" title="bug number 612430" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=555725" id="555725" title="bug number 555725" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=606294" id="606294" title="bug number 606294" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0211" id="CVE-2010-0211" title="CVE-2010-0211" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0212" id="CVE-2010-0212" title="CVE-2010-0212" type="cve"/>
  </references>
  <description>The following issues have been fixed in OpenLDAP: specially
crafted MODRDN operations can crash the OpenLDAP server
(CVE-2010-0211 and CVE-2010-0212).

also fixed were following bugs:
- adding a &quot;postalAdress&quot; Attribute with an embedded NUL
  value  caused the LDAP server to terminate with an
  assertion failure (bnc#555725, ITS#6379)
- Delete Operations happening during the &quot;Refresh&quot; phase
  of  &quot;refreshAndPersist&quot; replication failed to replicate
  under certain circumstances (bnc#606294, ITS#6555)
</description>
  <pkglist>
    <collection>
        <package name="openldap2-client-debuginfo" arch="i586" version="2.4.12" release="5.6.1">
          <filename>openldap2-client-debuginfo-2.4.12-5.6.1.i586.rpm</filename>
        </package>
        <package name="openldap2-client-debuginfo" arch="ppc" version="2.4.12" release="5.6.1">
          <filename>openldap2-client-debuginfo-2.4.12-5.6.1.ppc.rpm</filename>
        </package>
        <package name="openldap2-client-debuginfo" arch="x86_64" version="2.4.12" release="5.6.1">
          <filename>openldap2-client-debuginfo-2.4.12-5.6.1.x86_64.rpm</filename>
        </package>
        <package name="openldap2-client-debugsource" arch="i586" version="2.4.12" release="5.6.1">
          <filename>openldap2-client-debugsource-2.4.12-5.6.1.i586.rpm</filename>
        </package>
        <package name="openldap2-client-debugsource" arch="ppc" version="2.4.12" release="5.6.1">
          <filename>openldap2-client-debugsource-2.4.12-5.6.1.ppc.rpm</filename>
        </package>
        <package name="openldap2-client-debugsource" arch="x86_64" version="2.4.12" release="5.6.1">
          <filename>openldap2-client-debugsource-2.4.12-5.6.1.x86_64.rpm</filename>
        </package>
        <package name="openldap2-debuginfo" arch="i586" version="2.4.12" release="5.6.1">
          <filename>openldap2-debuginfo-2.4.12-5.6.1.i586.rpm</filename>
        </package>
        <package name="openldap2-debuginfo" arch="ppc" version="2.4.12" release="5.6.1">
          <filename>openldap2-debuginfo-2.4.12-5.6.1.ppc.rpm</filename>
        </package>
        <package name="openldap2-debuginfo" arch="x86_64" version="2.4.12" release="5.6.1">
          <filename>openldap2-debuginfo-2.4.12-5.6.1.x86_64.rpm</filename>
        </package>
        <package name="openldap2-debugsource" arch="i586" version="2.4.12" release="5.6.1">
          <filename>openldap2-debugsource-2.4.12-5.6.1.i586.rpm</filename>
        </package>
        <package name="openldap2-debugsource" arch="ppc" version="2.4.12" release="5.6.1">
          <filename>openldap2-debugsource-2.4.12-5.6.1.ppc.rpm</filename>
        </package>
        <package name="openldap2-debugsource" arch="x86_64" version="2.4.12" release="5.6.1">
          <filename>openldap2-debugsource-2.4.12-5.6.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
