OESA-2021-1119

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1119
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2021-1119.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2021-1119
Upstream
Published
2021-04-07T11:02:46Z
Modified
2025-08-12T05:07:48.396400Z
Summary
openldap security update
Details

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP.

Security Fix(es):

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.(CVE-2021-27212)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS / openldap

Package

Name
openldap
Purl
pkg:rpm/openEuler/openldap&distro=openEuler-20.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.4.50-4.oe1

Ecosystem specific 

{
    "aarch64": [
        "openldap-2.4.50-4.oe1.aarch64.rpm",
        "openldap-devel-2.4.50-4.oe1.aarch64.rpm",
        "openldap-debuginfo-2.4.50-4.oe1.aarch64.rpm",
        "openldap-debugsource-2.4.50-4.oe1.aarch64.rpm",
        "openldap-clients-2.4.50-4.oe1.aarch64.rpm",
        "openldap-servers-2.4.50-4.oe1.aarch64.rpm",
        "openldap-servers-2.4.50-4.oe1.aarch64.rpm",
        "openldap-2.4.50-4.oe1.aarch64.rpm",
        "openldap-debugsource-2.4.50-4.oe1.aarch64.rpm",
        "openldap-clients-2.4.50-4.oe1.aarch64.rpm",
        "openldap-devel-2.4.50-4.oe1.aarch64.rpm",
        "openldap-debuginfo-2.4.50-4.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "openldap-servers-2.4.50-4.oe1.x86_64.rpm",
        "openldap-2.4.50-4.oe1.x86_64.rpm",
        "openldap-debuginfo-2.4.50-4.oe1.x86_64.rpm",
        "openldap-debugsource-2.4.50-4.oe1.x86_64.rpm",
        "openldap-clients-2.4.50-4.oe1.x86_64.rpm",
        "openldap-devel-2.4.50-4.oe1.x86_64.rpm",
        "openldap-2.4.50-4.oe1.x86_64.rpm",
        "openldap-devel-2.4.50-4.oe1.x86_64.rpm",
        "openldap-clients-2.4.50-4.oe1.x86_64.rpm",
        "openldap-debuginfo-2.4.50-4.oe1.x86_64.rpm",
        "openldap-servers-2.4.50-4.oe1.x86_64.rpm",
        "openldap-debugsource-2.4.50-4.oe1.x86_64.rpm"
    ],
    "noarch": [
        "openldap-help-2.4.50-4.oe1.noarch.rpm",
        "openldap-help-2.4.50-4.oe1.noarch.rpm"
    ],
    "src": [
        "openldap-2.4.50-4.oe1.src.rpm",
        "openldap-2.4.50-4.oe1.src.rpm"
    ]
}

openEuler:20.03-LTS-SP1 / openldap

Package

Name
openldap
Purl
pkg:rpm/openEuler/openldap&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.4.50-4.oe1

Ecosystem specific 

{
    "aarch64": [
        "openldap-servers-2.4.50-4.oe1.aarch64.rpm",
        "openldap-2.4.50-4.oe1.aarch64.rpm",
        "openldap-debugsource-2.4.50-4.oe1.aarch64.rpm",
        "openldap-clients-2.4.50-4.oe1.aarch64.rpm",
        "openldap-devel-2.4.50-4.oe1.aarch64.rpm",
        "openldap-debuginfo-2.4.50-4.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "openldap-2.4.50-4.oe1.x86_64.rpm",
        "openldap-devel-2.4.50-4.oe1.x86_64.rpm",
        "openldap-clients-2.4.50-4.oe1.x86_64.rpm",
        "openldap-debuginfo-2.4.50-4.oe1.x86_64.rpm",
        "openldap-servers-2.4.50-4.oe1.x86_64.rpm",
        "openldap-debugsource-2.4.50-4.oe1.x86_64.rpm"
    ],
    "noarch": [
        "openldap-help-2.4.50-4.oe1.noarch.rpm"
    ],
    "src": [
        "openldap-2.4.50-4.oe1.src.rpm"
    ]
}