| Revision Date: | 2019-09-18 | Version: | 1 |
| Title: | (Moderate) |
| Description: |
This update for openldap2 fixes the following issues:
Security issue fixed:
- CVE-2019-13565: Fixed an authentication bypass when using SASL authentication and session encryption (bsc#1143194). - CVE-2019-13057: Fixed an issue with delegated database admin privileges (bsc#1143273). - CVE-2017-17740: When both the nops module and the member of overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation. (bsc#1073313)
Non-security issues fixed:
- Fixed broken shebang line in openldap_update_modules_path.sh (bsc#1114845). - Create files in /var/lib/ldap/ during initial start to allow for transactional updates (bsc#1111388) - Fixed incorrect post script call causing tmpfiles creation not to be run (bsc#1111388).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1073313
1111388
1114845
1137835
1143194
1143273
CVE-2017-17740
CVE-2019-12779
CVE-2019-13057
CVE-2019-13565
openSUSE-SU-2019:1891-1
|
| Platform(s): | Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
SUSE Package Hub for SUSE Linux Enterprise 15 SP1
| Product(s): | |
| Definition Synopsis |
| Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM is installed AND Package Information
libldap-2_4-2-2.4.46-9.19.2 is installed
OR libldap-data-2.4.46-9.19.2 is installed
OR openldap2-client-2.4.46-9.19.2 is installed
|
| Definition Synopsis |
| SUSE Package Hub for SUSE Linux Enterprise 15 SP1 is installed
AND Package Information
libqb-devel-1.0.3+20190326.a521604-bp151.2.3.1 is installed
OR libqb-devel-64bit-1.0.3+20190326.a521604-bp151.2.3.1 is installed
OR libqb-tests-1.0.3+20190326.a521604-bp151.2.3.1 is installed
OR libqb-tools-1.0.3+20190326.a521604-bp151.2.3.1 is installed
OR libqb20-1.0.3+20190326.a521604-bp151.2.3.1 is installed
OR libqb20-64bit-1.0.3+20190326.a521604-bp151.2.3.1 is installed
|