Your message dated Wed, 6 Jun 2012 09:44:14 +0300
with message-id <[email protected]>
and subject line closing issue 676309
has caused the Debian Bug report #676309,
regarding openldap: CVE-2012-2668 does not honor TLSCipherSuite settings
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
676309: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676309
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: openldap
Version: 2.4.23-7.2
Severity: important
Tags: security
https://bugzilla.redhat.com/show_bug.cgi?id=825875
"""
It was reported that OpenLDAP, when using the Mozilla NSS backend, would ignore
any TLSCipherSuite configuration settings. When the TLSCipherSuite setting is
configured, OpenLDAP would use the default cipher suite, ignoring the setting.
While the default cipher suite contains some weak ciphers (e.g. MD5-based), it
is still not easy to break the encryption to obtain sensitive information.
However, if an administrator wishes to enforce the use of stronger ciphers by
overriding the defaults using TLSCipherSuite, they should be able to trust
that, when the configuration items is in place, the stronger ciphers are used.
Due to this flaw, that is not the case.
"""
http://www.openldap.org/its/index.cgi?findid=7285
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commit;h=2c2bb2e
Please contact me in case you need testers for this issue.
- Henri Salo
-- System Information:
Debian Release: 6.0.5
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-5-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---
Closing this bug-report as per
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676309#10
--- End Message ---
