OESA-2021-1244

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1244
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2021-1244.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2021-1244
Upstream
Published
2021-06-26T11:03:00Z
Modified
2025-08-12T05:05:56.638709Z
Summary
openldap security update
Details

OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP.

Security Fix(es):

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.(CVE-2020-25710)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / openldap

Package

Name
openldap
Purl
pkg:rpm/openEuler/openldap&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.4.50-6.oe1

Ecosystem specific 

{
    "noarch": [
        "openldap-help-2.4.50-6.oe1.noarch.rpm"
    ],
    "src": [
        "openldap-2.4.50-6.oe1.src.rpm"
    ],
    "aarch64": [
        "openldap-devel-2.4.50-6.oe1.aarch64.rpm",
        "openldap-servers-2.4.50-6.oe1.aarch64.rpm",
        "openldap-debuginfo-2.4.50-6.oe1.aarch64.rpm",
        "openldap-clients-2.4.50-6.oe1.aarch64.rpm",
        "openldap-debugsource-2.4.50-6.oe1.aarch64.rpm",
        "openldap-2.4.50-6.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "openldap-debugsource-2.4.50-6.oe1.x86_64.rpm",
        "openldap-clients-2.4.50-6.oe1.x86_64.rpm",
        "openldap-2.4.50-6.oe1.x86_64.rpm",
        "openldap-devel-2.4.50-6.oe1.x86_64.rpm",
        "openldap-debuginfo-2.4.50-6.oe1.x86_64.rpm",
        "openldap-servers-2.4.50-6.oe1.x86_64.rpm"
    ]
}