[ SOURCE: http://www.secureroot.com/security/advisories/9737054933.html ] ---------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT ---------------------------------------------------------------------- PACKAGE : openldap SUMMARY : logrotate script kills klogd DATE : 2000-07-26 AFFECTED CONECTIVA VERSIONS : 4.1, 4.2 and 5.0 DESCRIPTION Our previous update introduced a logrotate script for the ldap logs. This script incorrectly signals the klogd daemon and kills it. This new update also upgrades the openldap package to version 1.2.11 which fixes some bugs in the 1.2.10 release. SOLUTION Users should upgrade to the new packages or at least remove the reference to klogd in /etc/logrotate.d/openldap. After upgrading, users should restart the slapd daemon so that the new version will be used. As root, issue the following command: /etc/rc.d/init.d/ldap restart Users who did not upgrade but only fixed the logrotate script do not need to restart the server. DIRECT DOWNLOAD LINKS TO UPDATED PACKAGES ftp://ftp.conectiva.com.br/pub/conectiva/atualizacoes/4.1/i386/openldap-1.2.11-5cl.i386.rpm ftp://ftp.conectiva.com.br/pub/conectiva/atualizacoes/4.1/i386/openldap-devel-1.2.11-5cl.i386.rpm ftp://ftp.conectiva.com.br/pub/conectiva/atualizacoes/4.2/i386/openldap-1.2.11-5cl.i386.rpm ftp://ftp.conectiva.com.br/pub/conectiva/atualizacoes/4.2/i386/openldap-devel-1.2.11-5cl.i386.rpm ftp://ftp.conectiva.com.br/pub/conectiva/atualizacoes/5.0/i386/openldap-1.2.11-5cl.i386.rpm ftp://ftp.conectiva.com.br/pub/conectiva/atualizacoes/5.0/i386/openldap-devel-1.2.11-5cl.i386.rpm DIRECT LINK TO THE SOURCE PACKAGES ftp://ftp.conectiva.com.br/pub/conectiva/atualizacoes/4.1/SRPMS/openldap-1.2.11-5cl.src.rpm ftp://ftp.conectiva.com.br/pub/conectiva/atualizacoes/4.2/SRPMS/openldap-1.2.11-5cl.src.rpm ftp://ftp.conectiva.com.br/pub/conectiva/atualizacoes/5.0/SRPMS/openldap-1.2.11-5cl.src.rpm ---------------------------------------------------------------------- All packages are signed with Conectiva's PGP key. The key can be obtained at http://www.conectiva.com.br/conectiva/contato.html ---------------------------------------------------------------------- subscribe: atualizacoes-anuncio-subscribe@bazar.conectiva.com.br unsubscribe: atualizacoes-anuncio-unsubscribe@bazar.conectiva.com.br