----------------------------------------------------------------------

CONECTIVA LINUX SECURITY ANNOUNCEMENT

----------------------------------------------------------------------



PACKAGE : openldap

SUMMARY : logrotate script kills klogd

DATE    : 2000-07-26

AFFECTED CONECTIVA VERSIONS : 4.1, 4.2 and 5.0





DESCRIPTION

Our previous update introduced a logrotate script for the ldap logs.

This script incorrectly signals the klogd daemon and kills it.

This new update also upgrades the openldap package to version 1.2.11

which fixes some bugs in the 1.2.10 release.





SOLUTION

Users should upgrade to the new packages or at least remove the

reference to klogd in /etc/logrotate.d/openldap.

After upgrading, users should restart the slapd daemon so that the

new version will be used. As root, issue the following command:



/etc/rc.d/init.d/ldap restart



Users who did not upgrade but only fixed the logrotate script do not

need to restart the server.





DIRECT DOWNLOAD LINKS TO UPDATED PACKAGES

http://ftp.conectiva.com.br/pub/conectiva/atualizacoes/4.1/i386/openldap-1.2.11-5cl.i386.rpm

http://ftp.conectiva.com.br/pub/conectiva/atualizacoes/4.1/i386/openldap-devel-1.2.11-5cl.i386.rpm

http://ftp.conectiva.com.br/pub/conectiva/atualizacoes/4.2/i386/openldap-1.2.11-5cl.i386.rpm

http://ftp.conectiva.com.br/pub/conectiva/atualizacoes/4.2/i386/openldap-devel-1.2.11-5cl.i386.rpm

http://ftp.conectiva.com.br/pub/conectiva/atualizacoes/5.0/i386/openldap-1.2.11-5cl.i386.rpm

http://ftp.conectiva.com.br/pub/conectiva/atualizacoes/5.0/i386/openldap-devel-1.2.11-5cl.i386.rpm





DIRECT LINK TO THE SOURCE PACKAGES

http://ftp.conectiva.com.br/pub/conectiva/atualizacoes/4.1/SRPMS/openldap-1.2.11-5cl.src.rpm

http://ftp.conectiva.com.br/pub/conectiva/atualizacoes/4.2/SRPMS/openldap-1.2.11-5cl.src.rpm

http://ftp.conectiva.com.br/pub/conectiva/atualizacoes/5.0/SRPMS/openldap-1.2.11-5cl.src.rpm





----------------------------------------------------------------------



All packages are signed with Conectiva's PGP key. The key can be obtained at

http://www.conectiva.com.br/conectiva/contato.html



----------------------------------------------------------------------

subscribe: atualizacoes-anuncio-subscribe@bazar.conectiva.com.br

unsubscribe: atualizacoes-anuncio-unsubscribe@bazar.conectiva.com.br