Oval Definition:	oval:org.opensuse.security:def:50661
Revision Date: 2020-12-01 Version: 1 Title: Security update for openldap2 (Moderate) Description: This update for openldap2 fixes the following issues: Security issue fixed: - CVE-2019-13565: Fixed an authentication bypass when using SASL authentication and session encryption (bsc#1143194). - CVE-2019-13057: Fixed an issue with delegated database admin privileges (bsc#1143273). - CVE-2017-17740: When both the nops module and the member of overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation. (bsc#1073313) Non-security issues fixed: - Fixed broken shebang line in openldap_update_modules_path.sh (bsc#1114845). - Create files in /var/lib/ldap/ during initial start to allow for transactional updates (bsc#1111388) - Fixed incorrect post script call causing tmpfiles creation not to be run (bsc#1111388). Family: unix Class: patch Status: Reference(s): 1012382 1048942 1050242 1051510 1053043 1055186 1056787 1058115 1061840 1063412 1063638 1064802 1065600 1065729 1066129 1068546 1071995 1073313 1075020 1076958 1078248 1082387 1082635 1083647 1085535 1089644 1091041 1095218 1095219 1099658 1103203 1103990 1103991 1103992 1104353 1104427 1104745 1106011 1106284 1108043 1108193 1108838 1108937 1109465 1109837 1110946 1110949 1111388 1111666 1111696 1112063 1112178 1112230 1112374 1113722 1113956 1113994 1114225 1114279 1114427 1114845 1115688 1117158 1117169 1117473 1117561 1118139 1118661 1119113 1119843 1120091 1120423 1120566 1120843 1120853 1120902 1122776 1123454 1123482 1123663 1124503 1124525 1124839 1126356 1126390 1127354 1127371 1127616 1128052 1128904 1128979 1129138 1129273 1129497 1129693 1129770 1130579 1130699 1130972 1131107 1131326 1131451 1131488 1131565 1131673 1132044 1132350 1133176 1133188 1133190 1133320 1133612 1133616 1133810 1134160 1134162 1134199 1134200 1134201 1134202 1134203 1134204 1134205 1134354 1134393 1134459 1134460 1134461 1134537 1134597 1134651 1134671 1134760 1134806 1134810 1134813 1134848 1134936 1134983 1135006 1135007 1135008 1135056 1135100 1135120 1135278 1135281 1135309 1135312 1135314 1135315 1135316 1135320 1135323 1135330 1135492 1135542 1135556 1135603 1135642 1135661 1135758 1135966 1135967 1136206 1136424 1136428 1136430 1136432 1136434 1136435 1136438 1136439 1136477 1136478 1136573 1136586 1136881 1136935 1136990 1137151 1137152 1137153 1137162 1137223 1137236 1137372 1137444 1137586 1137739 1137752 1138039 1138688 1138743 1140868 1140948 1141132 1141322 1142095 1142635 1142924 1143194 1143273 1143706 1144333 1145665 1149292 1149293 1149294 1149295 1149296 1149297 1149298 1149299 1149302 1149303 1149304 1149323 1149448 1149792 1150466 1151067 1151548 1151900 1152539 1152782 1153628 1153811 1154043 1154058 1154124 1154355 1154526 1154601 1154849 1155021 1155689 1155692 1155836 1155897 1155921 1155982 1156187 1156258 1156429 1156466 1156471 1156494 1156543 1156609 1156651 1156700 1156729 1156882 1156928 1157032 1157038 1157042 1157044 1157045 1157046 1157049 1157070 1157115 1157143 1157145 1157158 1157160 1157162 1157171 1157173 1157178 1157180 1157182 1157183 1157184 1157191 1157193 1157197 1157298 1157304 1157307 1157324 1157333 1157386 1157424 1157463 1157499 1157678 1157698 1157778 1157908 1158049 1158063 1158064 1158065 1158066 1158067 1158068 1158071 1158082 1158381 1158394 1158398 1158407 1158410 1158413 1158417 1158427 1158445 1158785 1158787 1158788 1158789 1158790 1158791 1158792 1158793 1158795 1158880 1160467 1160468 1167816 1167890 1168930 1169605 1169786 1169936 1170940 1171456 1171457 1171458 1171928 1172686 1173100 1173659 1173661 1173663 1173869 1173937 1173942 1173963 1174157 1174186 1174247 1176589 1176605 1176756 1177872 CVE-2017-15107 CVE-2017-15298 CVE-2017-17740 CVE-2018-11233 CVE-2018-11235 CVE-2018-17456 CVE-2018-7191 CVE-2019-0154 CVE-2019-0155 CVE-2019-10124 CVE-2019-11085 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-11486 CVE-2019-11487 CVE-2019-11710 CVE-2019-11714 CVE-2019-11716 CVE-2019-11718 CVE-2019-11720 CVE-2019-11721 CVE-2019-11723 CVE-2019-11724 CVE-2019-11725 CVE-2019-11727 CVE-2019-11728 CVE-2019-11733 CVE-2019-11735 CVE-2019-11736 CVE-2019-11738 CVE-2019-11740 CVE-2019-11742 CVE-2019-11743 CVE-2019-11744 CVE-2019-11746 CVE-2019-11747 CVE-2019-11748 CVE-2019-11749 CVE-2019-11750 CVE-2019-11751 CVE-2019-11752 CVE-2019-11753 CVE-2019-11815 CVE-2019-11833 CVE-2019-11884 CVE-2019-12382 CVE-2019-13057 CVE-2019-1348 CVE-2019-1349 CVE-2019-1350 CVE-2019-13508 CVE-2019-1351 CVE-2019-1352 CVE-2019-1353 CVE-2019-1354 CVE-2019-13565 CVE-2019-1387 CVE-2019-14834 CVE-2019-14895 CVE-2019-14895 CVE-2019-14896 CVE-2019-14897 CVE-2019-14901 CVE-2019-14901 CVE-2019-15916 CVE-2019-16231 CVE-2019-16746 CVE-2019-17055 CVE-2019-18660 CVE-2019-18683 CVE-2019-18805 CVE-2019-18809 CVE-2019-19046 CVE-2019-19049 CVE-2019-19052 CVE-2019-19056 CVE-2019-19057 CVE-2019-19058 CVE-2019-19060 CVE-2019-19062 CVE-2019-19063 CVE-2019-19065 CVE-2019-19067 CVE-2019-19068 CVE-2019-19073 CVE-2019-19074 CVE-2019-19075 CVE-2019-19077 CVE-2019-19078 CVE-2019-19080 CVE-2019-19081 CVE-2019-19082 CVE-2019-19083 CVE-2019-19227 CVE-2019-19447 CVE-2019-19524 CVE-2019-19525 CVE-2019-19528 CVE-2019-19529 CVE-2019-19530 CVE-2019-19531 CVE-2019-19534 CVE-2019-19536 CVE-2019-19543 CVE-2019-19604 CVE-2019-3846 CVE-2019-5489 CVE-2019-9458 CVE-2019-9811 CVE-2019-9812 CVE-2020-10957 CVE-2020-10958 CVE-2020-10967 CVE-2020-11008 CVE-2020-11668 CVE-2020-14331 CVE-2020-14556 CVE-2020-14562 CVE-2020-14573 CVE-2020-14577 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 CVE-2020-15095 CVE-2020-15683 CVE-2020-15780 CVE-2020-15969 CVE-2020-1983 CVE-2020-5260 CVE-2020-8201 CVE-2020-8252 CVE-2020-9484 CVE-2020-9484 SUSE-SU-2019:1535-1 SUSE-SU-2019:2395-1 SUSE-SU-2019:2545-1 SUSE-SU-2019:3189-1 SUSE-SU-2020:1121-1 SUSE-SU-2020:1364-1 SUSE-SU-2020:1379-1 SUSE-SU-2020:1502-1 SUSE-SU-2020:2505-1 SUSE-SU-2020:2813-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information xorg-x11-libXv-7.4-1.16 is installed OR xorg-x11-libXv-32bit-7.4-1.16 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information flash-player-11.2.202.540-0.23 is installed OR flash-player-gnome-11.2.202.540-0.23 is installed OR flash-player-kde4-11.2.202.540-0.23 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND groff-1.22.2-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information java-1_7_0-openjdk-plugin-1.6.1-2.3 is installed OR java-1_8_0-openjdk-plugin-1.6.1-2.4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information elfutils-0.158-6 is installed OR libasm1-0.158-6 is installed OR libdw1-0.158-6 is installed OR libdw1-32bit-0.158-6 is installed OR libebl1-0.158-6 is installed OR libebl1-32bit-0.158-6 is installed OR libelf1-0.158-6 is installed OR libelf1-32bit-0.158-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND coolkey-1.1.0-147 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information MozillaFirefox-52.9.0esr-109.38 is installed OR MozillaFirefox-translations-52.9.0esr-109.38 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information libldap-2_4-2-2.4.46-9.19 is installed OR libldap-2_4-2-32bit-2.4.46-9.19 is installed OR openldap2-2.4.46-9.19 is installed OR openldap2-client-2.4.46-9.19 is installed OR openldap2-devel-2.4.46-9.19 is installed OR openldap2-devel-static-2.4.46-9.19 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.29 is installed OR reiserfs-kmp-default-4.12.14-197.29 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_38-default-4-2 is installed OR kernel-livepatch-SLE15_Update_15-4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_21-default-8-2 is installed OR kernel-livepatch-SLE15-SP1_Update_6-8-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information MozillaFirefox-68.1.0-3.54 is installed OR MozillaFirefox-branding-upstream-68.1.0-3.54 is installed OR MozillaFirefox-buildsymbols-68.1.0-3.54 is installed OR MozillaFirefox-devel-68.1.0-3.54 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information freetds-1.1.36-3.3 is installed OR freetds-config-1.1.36-3.3 is installed OR freetds-devel-1.1.36-3.3 is installed OR freetds-doc-1.1.36-3.3 is installed OR freetds-tools-1.1.36-3.3 is installed OR libsybdb5-1.1.36-3.3 is installed OR libtdsodbc0-1.1.36-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 is installed AND Package Information kernel-azure-4.12.14-5.30 is installed OR kernel-azure-base-4.12.14-5.30 is installed OR kernel-azure-devel-4.12.14-5.30 is installed OR kernel-devel-azure-4.12.14-5.30 is installed OR kernel-source-azure-4.12.14-5.30 is installed OR kernel-syms-azure-4.12.14-5.30 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information qemu-3.1.1.1-9.21 is installed OR qemu-arm-3.1.1.1-9.21 is installed OR qemu-audio-alsa-3.1.1.1-9.21 is installed OR qemu-audio-oss-3.1.1.1-9.21 is installed OR qemu-audio-pa-3.1.1.1-9.21 is installed OR qemu-block-curl-3.1.1.1-9.21 is installed OR qemu-block-iscsi-3.1.1.1-9.21 is installed OR qemu-block-rbd-3.1.1.1-9.21 is installed OR qemu-block-ssh-3.1.1.1-9.21 is installed OR qemu-guest-agent-3.1.1.1-9.21 is installed OR qemu-ipxe-1.0.0+-9.21 is installed OR qemu-kvm-3.1.1.1-9.21 is installed OR qemu-lang-3.1.1.1-9.21 is installed OR qemu-ppc-3.1.1.1-9.21 is installed OR qemu-s390-3.1.1.1-9.21 is installed OR qemu-seabios-1.12.0-9.21 is installed OR qemu-sgabios-8-9.21 is installed OR qemu-ui-curses-3.1.1.1-9.21 is installed OR qemu-ui-gtk-3.1.1.1-9.21 is installed OR qemu-vgabios-1.12.0-9.21 is installed OR qemu-x86-3.1.1.1-9.21 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP2 is installed AND Package Information nodejs12-12.18.4-4.6 is installed OR nodejs12-devel-12.18.4-4.6 is installed OR nodejs12-docs-12.18.4-4.6 is installed OR npm12-12.18.4-4.6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information gdk-pixbuf-loader-rsvg-2.40.2-1 is installed OR librsvg-2-2-2.40.2-1 is installed OR librsvg-2-2-32bit-2.40.2-1 is installed OR rsvg-view-2.40.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information java-1_8_0-openjdk-1.8.0.144-27.5 is installed OR java-1_8_0-openjdk-demo-1.8.0.144-27.5 is installed OR java-1_8_0-openjdk-devel-1.8.0.144-27.5 is installed OR java-1_8_0-openjdk-headless-1.8.0.144-27.5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information ibus-chewing-1.4.14-4 is installed OR ibus-pinyin-1.5.0-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kernel-default-4.4.121-92.92 is installed OR kernel-default-base-4.4.121-92.92 is installed OR kernel-default-devel-4.4.121-92.92 is installed OR kernel-devel-4.4.121-92.92 is installed OR kernel-macros-4.4.121-92.92 is installed OR kernel-source-4.4.121-92.92 is installed OR kernel-syms-4.4.121-92.92 is installed OR kgraft-patch-4_4_121-92_92-default-1-3.7 is installed OR kgraft-patch-SLE12-SP2_Update_24-1-3.7 is installed OR lttng-modules-2.7.1-9.4 is installed OR lttng-modules-kmp-default-2.7.1_k4.4.121_92.92-9.4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information ntp-4.2.8p11-64.5 is installed OR ntp-doc-4.2.8p11-64.5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information cyrus-sasl-2.1.26-7 is installed OR cyrus-sasl-32bit-2.1.26-7 is installed OR cyrus-sasl-crammd5-2.1.26-7 is installed OR cyrus-sasl-crammd5-32bit-2.1.26-7 is installed OR cyrus-sasl-digestmd5-2.1.26-7 is installed OR cyrus-sasl-gssapi-2.1.26-7 is installed OR cyrus-sasl-gssapi-32bit-2.1.26-7 is installed OR cyrus-sasl-otp-2.1.26-7 is installed OR cyrus-sasl-otp-32bit-2.1.26-7 is installed OR cyrus-sasl-plain-2.1.26-7 is installed OR cyrus-sasl-plain-32bit-2.1.26-7 is installed OR cyrus-sasl-saslauthd-2.1.26-7 is installed OR cyrus-sasl-sqlauxprop-2.1.26-7 is installed OR cyrus-sasl-sqlauxprop-32bit-2.1.26-7 is installed OR libsasl2-3-2.1.26-7 is installed OR libsasl2-3-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND ucode-intel-20190618-13.47 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information MozillaFirefox-68.4.1-109.101 is installed OR MozillaFirefox-translations-common-68.4.1-109.101 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information ceph-12.2.7+git.1531910353.c0ef85b854-2.12 is installed OR ceph-common-12.2.7+git.1531910353.c0ef85b854-2.12 is installed OR libcephfs2-12.2.7+git.1531910353.c0ef85b854-2.12 is installed OR librados2-12.2.7+git.1531910353.c0ef85b854-2.12 is installed OR libradosstriper1-12.2.7+git.1531910353.c0ef85b854-2.12 is installed OR librbd1-12.2.7+git.1531910353.c0ef85b854-2.12 is installed OR librgw2-12.2.7+git.1531910353.c0ef85b854-2.12 is installed OR python-cephfs-12.2.7+git.1531910353.c0ef85b854-2.12 is installed OR python-rados-12.2.7+git.1531910353.c0ef85b854-2.12 is installed OR python-rbd-12.2.7+git.1531910353.c0ef85b854-2.12 is installed OR python-rgw-12.2.7+git.1531910353.c0ef85b854-2.12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information gstreamer-plugins-good-1.8.3-15 is installed OR gstreamer-plugins-good-lang-1.8.3-15 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information tomcat-9.0.35-3.52 is installed OR tomcat-admin-webapps-9.0.35-3.52 is installed OR tomcat-el-3_0-api-9.0.35-3.52 is installed OR tomcat-jsp-2_3-api-9.0.35-3.52 is installed OR tomcat-lib-9.0.35-3.52 is installed OR tomcat-servlet-4_0-api-9.0.35-3.52 is installed OR tomcat-webapps-9.0.35-3.52 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information libldap-2_4-2-2.4.46-9.31 is installed OR libldap-2_4-2-32bit-2.4.46-9.31 is installed OR libldap-data-2.4.46-9.31 is installed OR openldap2-2.4.46-9.31 is installed OR openldap2-back-meta-2.4.46-9.31 is installed OR openldap2-back-perl-2.4.46-9.31 is installed OR openldap2-client-2.4.46-9.31 is installed OR openldap2-devel-2.4.46-9.31 is installed OR openldap2-devel-32bit-2.4.46-9.31 is installed OR openldap2-devel-static-2.4.46-9.31 is installed OR openldap2-ppolicy-check-password-1.2-9.31 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-68.3.0-3.61 is installed OR MozillaThunderbird-translations-common-68.3.0-3.61 is installed OR MozillaThunderbird-translations-other-68.3.0-3.61 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.15 is installed OR kernel-default-extra-4.12.14-197.15 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information qemu-2.3.1-33.6 is installed OR qemu-block-curl-2.3.1-33.6 is installed OR qemu-block-rbd-2.3.1-33.6 is installed OR qemu-guest-agent-2.3.1-33.6 is installed OR qemu-ipxe-1.0.0-33.6 is installed OR qemu-kvm-2.3.1-33.6 is installed OR qemu-lang-2.3.1-33.6 is installed OR qemu-seabios-1.8.1-33.6 is installed OR qemu-sgabios-8-33.6 is installed OR qemu-tools-2.3.1-33.6 is installed OR qemu-vgabios-1.8.1-33.6 is installed OR qemu-x86-2.3.1-33.6 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-devel-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND git-2.12.3-27.14 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND ucode-intel-20190618-13.47 is installed
BACK