nss_ldap bug fix update

An updated nss_ldap package that fixes a bug is now available for Red Hat
Enterprise Linux 3.

The nss_ldap package contains the nss_ldap and pam_ldap modules. The
nss_ldap module is a plug-in which allows applications to retrieve
information about users and groups from a directory server. The pam_ldap
module allows PAM-aware applications to use a directory server to verify
user passwords.

When the nss_ldap plug-in attempted to format the list of a group's members
for an application, it did not correctly detect when the space provided to
store that list was insufficient. For large groups, this resulted in a
corrupt heap, which typically resulted in the calling application crashing,
or a segmentation fault.

Users of nss_ldap are advised to upgrade to this updated package, which
resolves this issue.

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

group, nss_ldap, resolution