Operational Defect Database

BugZero found this defect 27 days ago.

MongoDB | 2650308

Properly detect when OpenLDAP includes MozNSS-compatible shims

Last update date:

4/22/2024

Affected products:

MongoDB Server

Affected releases:

No affected releases provided.

Fixed releases:

No fixed releases provided.

Description:

Info

RHEL 7.5+ (and by extension, Amazon Linux 2) link the single-threaded version of libldap by default. Additionally, this version of libldap has been patched to use OpenSSL but still relies on Mozilla NSS's db of certs. The server needs to properly detect when libldap is still using MozNSS, which influences whether or not the LDAP connection pool can be used.

Top User Comments


Steps to Reproduce


Additional Resources / Links

Share:

BugZero® Risk Score

What's this?

Coming soon

Status

Open

Learn More

Search:

...