Oval Definition:	oval:org.opensuse.security:def:51461
Revision Date: 2020-12-01 Version: 1 Title: Security update for openldap2 (Moderate) Description: This update for openldap2 fixes the following issues: Security issue fixed: - CVE-2019-13565: Fixed an authentication bypass when using SASL authentication and session encryption (bsc#1143194). - CVE-2019-13057: Fixed an issue with delegated database admin privileges (bsc#1143273). - CVE-2017-17740: When both the nops module and the member of overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation. (bsc#1073313) Non-security issues fixed: - Fixed broken shebang line in openldap_update_modules_path.sh (bsc#1114845). - Create files in /var/lib/ldap/ during initial start to allow for transactional updates (bsc#1111388) - Fixed incorrect post script call causing tmpfiles creation not to be run (bsc#1111388). Family: unix Class: patch Status: Reference(s): 1050305 1050549 1051510 1052904 1053043 1055117 1055121 1061840 1065600 1065729 1070872 1073313 1078216 1082555 1083647 1085535 1085536 1088262 1088804 1091606 1091772 1092699 1093536 1093777 1094120 1094244 1094359 1094462 1096673 1097583 1097584 1097585 1097586 1097587 1097588 1100132 1103186 1103203 1103259 1107874 1107937 1109845 1111331 1111388 1112128 1112178 1113399 1113722 1114279 1114542 1114638 1114845 1119086 1119680 1120318 1120902 1122767 1123105 1125342 1126221 1126356 1126704 1126740 1127175 1127371 1127372 1127374 1127378 1127445 1128415 1128544 1129276 1129770 1130130 1130154 1130195 1130335 1130336 1130337 1130338 1130425 1130427 1130518 1130527 1130567 1131062 1131107 1131167 1131168 1131169 1131170 1131171 1131172 1131173 1131174 1131175 1131176 1131177 1131178 1131179 1131180 1131290 1131335 1131336 1131416 1131427 1131442 1131467 1131574 1131587 1131659 1131673 1131847 1131848 1131851 1131900 1131934 1131935 1132083 1132219 1132226 1132227 1132365 1132368 1132369 1132370 1132372 1132373 1132384 1132397 1132402 1132403 1132404 1132405 1132407 1132411 1132412 1132413 1132414 1132426 1132527 1132531 1132555 1132558 1132561 1132562 1132563 1132564 1132570 1132571 1132572 1132589 1132618 1132681 1132726 1132828 1132943 1133005 1133094 1133095 1133115 1133149 1133486 1133529 1133584 1133667 1133668 1133672 1133674 1133675 1133698 1133702 1133731 1133769 1133772 1133774 1133778 1133779 1133780 1133825 1133850 1133851 1133852 1143194 1143273 1154824 1155798 1156353 1159646 1159913 1160467 1160468 1165631 1168468 1171675 1172466 1172686 1173937 1175599 1175718 1176019 1176381 1176588 1176589 1176605 1176979 1177027 1177121 1177193 1177194 1177206 1177258 1177283 1177284 1177285 1177286 1177297 1177384 1177511 1177513 1177729 954532 CVE-2004-2771 CVE-2006-2607 CVE-2009-4029 CVE-2010-0405 CVE-2010-0424 CVE-2011-2721 CVE-2011-3627 CVE-2012-1457 CVE-2012-1458 CVE-2012-1459 CVE-2012-2141 CVE-2014-2284 CVE-2014-2285 CVE-2014-3565 CVE-2014-7844 CVE-2015-5621 CVE-2017-17740 CVE-2018-10583 CVE-2018-10811 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-16151 CVE-2018-16152 CVE-2018-16880 CVE-2018-17540 CVE-2018-5388 CVE-2019-11091 CVE-2019-13057 CVE-2019-13565 CVE-2019-14896 CVE-2019-14897 CVE-2019-17571 CVE-2019-3882 CVE-2019-5108 CVE-2019-9003 CVE-2019-9500 CVE-2019-9503 CVE-2020-0543 CVE-2020-0548 CVE-2020-0549 CVE-2020-12351 CVE-2020-15095 CVE-2020-1749 CVE-2020-25212 CVE-2020-25641 CVE-2020-25643 CVE-2020-25645 CVE-2020-8201 CVE-2020-8252 SUSE-SU-2018:2535-1 SUSE-SU-2019:1240-1 SUSE-SU-2019:2395-1 SUSE-SU-2019:3056-1 SUSE-SU-2020:0053-1 SUSE-SU-2020:1600-1 SUSE-SU-2020:2813-1 SUSE-SU-2020:3230-1 Platform(s): openSUSE Leap 15.0 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Realtime packages 15 SP2 SUSE Linux Enterprise Module for Web Scripting 15 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND libjbig2-2.1-lp150.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information curl-7.19.7-1.46 is installed OR libcurl4-7.19.7-1.46 is installed OR libcurl4-32bit-7.19.7-1.46 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND xfsprogs-3.1.8-0.7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND clamav-0.98.4-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information cron-4.2-58 is installed OR cronie-1.4.11-58 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND groff-1.22.2-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information gegl-0_2-0.2.0-14 is installed OR gegl-0_2-lang-0.2.0-14 is installed OR libgegl-0_2-0-0.2.0-14 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information bash-4.3-83.15 is installed OR bash-doc-4.3-83.15 is installed OR bash-lang-4.3-83.15 is installed OR libreadline6-6.3-83.15 is installed OR libreadline6-32bit-6.3-83.15 is installed OR readline-doc-6.3-83.15 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND Package Information strongswan-5.6.0-4.3 is installed OR strongswan-nm-5.6.0-4.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed AND Package Information openldap2-2.4.46-9.19 is installed OR openldap2-devel-32bit-2.4.46-9.19 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_35-default-5-2 is installed OR kernel-livepatch-SLE15_Update_14-5-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_10-default-5-2 is installed OR kernel-livepatch-SLE15-SP1_Update_3-5-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 is installed AND Package Information kernel-azure-4.12.14-5.27 is installed OR kernel-azure-base-4.12.14-5.27 is installed OR kernel-azure-devel-4.12.14-5.27 is installed OR kernel-devel-azure-4.12.14-5.27 is installed OR kernel-source-azure-4.12.14-5.27 is installed OR kernel-syms-azure-4.12.14-5.27 is installed Definition Synopsis SUSE Linux Enterprise Module for Realtime packages 15 SP2 is installed AND Package Information cluster-md-kmp-rt-5.3.18-13 is installed OR dlm-kmp-rt-5.3.18-13 is installed OR gfs2-kmp-rt-5.3.18-13 is installed OR kernel-devel-rt-5.3.18-13 is installed OR kernel-rt-5.3.18-13 is installed OR kernel-rt-devel-5.3.18-13 is installed OR kernel-rt_debug-5.3.18-13 is installed OR kernel-rt_debug-devel-5.3.18-13 is installed OR kernel-source-rt-5.3.18-13 is installed OR kernel-syms-rt-5.3.18-13 is installed OR ocfs2-kmp-rt-5.3.18-13 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP2 is installed AND Package Information nodejs12-12.18.4-4.6 is installed OR nodejs12-devel-12.18.4-4.6 is installed OR nodejs12-docs-12.18.4-4.6 is installed OR npm12-12.18.4-4.6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information MozillaFirefox-45.9.0esr-105 is installed OR MozillaFirefox-translations-45.9.0esr-105 is installed OR java-1_8_0-openjdk-1.8.0.121-23 is installed OR java-1_8_0-openjdk-demo-1.8.0.121-23 is installed OR java-1_8_0-openjdk-devel-1.8.0.121-23 is installed OR java-1_8_0-openjdk-headless-1.8.0.121-23 is installed OR libfreebl3-3.29.5-57 is installed OR libfreebl3-32bit-3.29.5-57 is installed OR libfreebl3-hmac-3.29.5-57 is installed OR libfreebl3-hmac-32bit-3.29.5-57 is installed OR libsoftokn3-3.29.5-57 is installed OR libsoftokn3-32bit-3.29.5-57 is installed OR libsoftokn3-hmac-3.29.5-57 is installed OR libsoftokn3-hmac-32bit-3.29.5-57 is installed OR mozilla-nspr-4.13.1-18 is installed OR mozilla-nspr-32bit-4.13.1-18 is installed OR mozilla-nss-3.29.5-57 is installed OR mozilla-nss-32bit-3.29.5-57 is installed OR mozilla-nss-certs-3.29.5-57 is installed OR mozilla-nss-certs-32bit-3.29.5-57 is installed OR mozilla-nss-sysinit-3.29.5-57 is installed OR mozilla-nss-sysinit-32bit-3.29.5-57 is installed OR mozilla-nss-tools-3.29.5-57 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_69-60_64_32-default-4-3 is installed OR kgraft-patch-3_12_69-60_64_32-xen-4-3 is installed OR kgraft-patch-SLE12-SP1_Update_13-4-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information fuse-2.9.3-5 is installed OR libfuse2-2.9.3-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information dovecot22-2.2.31-19.11 is installed OR dovecot22-backend-mysql-2.2.31-19.11 is installed OR dovecot22-backend-pgsql-2.2.31-19.11 is installed OR dovecot22-backend-sqlite-2.2.31-19.11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information libwireshark9-2.4.9-48.29 is installed OR libwiretap7-2.4.9-48.29 is installed OR libwscodecs1-2.4.9-48.29 is installed OR libwsutil8-2.4.9-48.29 is installed OR wireshark-2.4.9-48.29 is installed OR wireshark-gtk-2.4.9-48.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information java-1_8_0-openjdk-1.8.0.171-27.19 is installed OR java-1_8_0-openjdk-demo-1.8.0.171-27.19 is installed OR java-1_8_0-openjdk-devel-1.8.0.171-27.19 is installed OR java-1_8_0-openjdk-headless-1.8.0.171-27.19 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information cups-1.7.5-19 is installed OR cups-client-1.7.5-19 is installed OR cups-libs-1.7.5-19 is installed OR cups-libs-32bit-1.7.5-19 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information libsystemd0-228-150.82 is installed OR libsystemd0-32bit-228-150.82 is installed OR libudev1-228-150.82 is installed OR libudev1-32bit-228-150.82 is installed OR systemd-228-150.82 is installed OR systemd-32bit-228-150.82 is installed OR systemd-bash-completion-228-150.82 is installed OR systemd-sysvinit-228-150.82 is installed OR udev-228-150.82 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information kgraft-patch-4_4_175-94_79-default-6-2 is installed OR kgraft-patch-SLE12-SP3_Update_23-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_175-94_79-default-6-2 is installed OR kgraft-patch-SLE12-SP3_Update_23-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information MozillaFirefox-52.9.0esr-109.38 is installed OR MozillaFirefox-translations-52.9.0esr-109.38 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND apache2-mod_perl-2.0.8-11 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND ucode-intel-20200602-3.43 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information libreoffice-6.0.5.2-3.3 is installed OR libreoffice-base-6.0.5.2-3.3 is installed OR libreoffice-base-drivers-mysql-6.0.5.2-3.3 is installed OR libreoffice-base-drivers-postgresql-6.0.5.2-3.3 is installed OR libreoffice-branding-upstream-6.0.5.2-3.3 is installed OR libreoffice-calc-6.0.5.2-3.3 is installed OR libreoffice-calc-extensions-6.0.5.2-3.3 is installed OR libreoffice-draw-6.0.5.2-3.3 is installed OR libreoffice-filters-optional-6.0.5.2-3.3 is installed OR libreoffice-gnome-6.0.5.2-3.3 is installed OR libreoffice-gtk3-6.0.5.2-3.3 is installed OR libreoffice-icon-themes-6.0.5.2-3.3 is installed OR libreoffice-impress-6.0.5.2-3.3 is installed OR libreoffice-l10n-af-6.0.5.2-3.3 is installed OR libreoffice-l10n-ar-6.0.5.2-3.3 is installed OR libreoffice-l10n-as-6.0.5.2-3.3 is installed OR libreoffice-l10n-bg-6.0.5.2-3.3 is installed OR libreoffice-l10n-bn-6.0.5.2-3.3 is installed OR libreoffice-l10n-br-6.0.5.2-3.3 is installed OR libreoffice-l10n-ca-6.0.5.2-3.3 is installed OR libreoffice-l10n-cs-6.0.5.2-3.3 is installed OR libreoffice-l10n-cy-6.0.5.2-3.3 is installed OR libreoffice-l10n-da-6.0.5.2-3.3 is installed OR libreoffice-l10n-de-6.0.5.2-3.3 is installed OR libreoffice-l10n-dz-6.0.5.2-3.3 is installed OR libreoffice-l10n-el-6.0.5.2-3.3 is installed OR libreoffice-l10n-en-6.0.5.2-3.3 is installed OR libreoffice-l10n-eo-6.0.5.2-3.3 is installed OR libreoffice-l10n-es-6.0.5.2-3.3 is installed OR libreoffice-l10n-et-6.0.5.2-3.3 is installed OR libreoffice-l10n-eu-6.0.5.2-3.3 is installed OR libreoffice-l10n-fa-6.0.5.2-3.3 is installed OR libreoffice-l10n-fi-6.0.5.2-3.3 is installed OR libreoffice-l10n-fr-6.0.5.2-3.3 is installed OR libreoffice-l10n-ga-6.0.5.2-3.3 is installed OR libreoffice-l10n-gl-6.0.5.2-3.3 is installed OR libreoffice-l10n-gu-6.0.5.2-3.3 is installed OR libreoffice-l10n-he-6.0.5.2-3.3 is installed OR libreoffice-l10n-hi-6.0.5.2-3.3 is installed OR libreoffice-l10n-hr-6.0.5.2-3.3 is installed OR libreoffice-l10n-hu-6.0.5.2-3.3 is installed OR libreoffice-l10n-it-6.0.5.2-3.3 is installed OR libreoffice-l10n-ja-6.0.5.2-3.3 is installed OR libreoffice-l10n-kk-6.0.5.2-3.3 is installed OR libreoffice-l10n-kn-6.0.5.2-3.3 is installed OR libreoffice-l10n-ko-6.0.5.2-3.3 is installed OR libreoffice-l10n-lt-6.0.5.2-3.3 is installed OR libreoffice-l10n-lv-6.0.5.2-3.3 is installed OR libreoffice-l10n-mai-6.0.5.2-3.3 is installed OR libreoffice-l10n-ml-6.0.5.2-3.3 is installed OR libreoffice-l10n-mr-6.0.5.2-3.3 is installed OR libreoffice-l10n-nb-6.0.5.2-3.3 is installed OR libreoffice-l10n-nl-6.0.5.2-3.3 is installed OR libreoffice-l10n-nn-6.0.5.2-3.3 is installed OR libreoffice-l10n-nr-6.0.5.2-3.3 is installed OR libreoffice-l10n-nso-6.0.5.2-3.3 is installed OR libreoffice-l10n-or-6.0.5.2-3.3 is installed OR libreoffice-l10n-pa-6.0.5.2-3.3 is installed OR libreoffice-l10n-pl-6.0.5.2-3.3 is installed OR libreoffice-l10n-pt_BR-6.0.5.2-3.3 is installed OR libreoffice-l10n-pt_PT-6.0.5.2-3.3 is installed OR libreoffice-l10n-ro-6.0.5.2-3.3 is installed OR libreoffice-l10n-ru-6.0.5.2-3.3 is installed OR libreoffice-l10n-si-6.0.5.2-3.3 is installed OR libreoffice-l10n-sk-6.0.5.2-3.3 is installed OR libreoffice-l10n-sl-6.0.5.2-3.3 is installed OR libreoffice-l10n-sr-6.0.5.2-3.3 is installed OR libreoffice-l10n-ss-6.0.5.2-3.3 is installed OR libreoffice-l10n-st-6.0.5.2-3.3 is installed OR libreoffice-l10n-sv-6.0.5.2-3.3 is installed OR libreoffice-l10n-ta-6.0.5.2-3.3 is installed OR libreoffice-l10n-te-6.0.5.2-3.3 is installed OR libreoffice-l10n-th-6.0.5.2-3.3 is installed OR libreoffice-l10n-tn-6.0.5.2-3.3 is installed OR libreoffice-l10n-tr-6.0.5.2-3.3 is installed OR libreoffice-l10n-ts-6.0.5.2-3.3 is installed OR libreoffice-l10n-uk-6.0.5.2-3.3 is installed OR libreoffice-l10n-ve-6.0.5.2-3.3 is installed OR libreoffice-l10n-xh-6.0.5.2-3.3 is installed OR libreoffice-l10n-zh_CN-6.0.5.2-3.3 is installed OR libreoffice-l10n-zh_TW-6.0.5.2-3.3 is installed OR libreoffice-l10n-zu-6.0.5.2-3.3 is installed OR libreoffice-mailmerge-6.0.5.2-3.3 is installed OR libreoffice-math-6.0.5.2-3.3 is installed OR libreoffice-officebean-6.0.5.2-3.3 is installed OR libreoffice-pyuno-6.0.5.2-3.3 is installed OR libreoffice-writer-6.0.5.2-3.3 is installed OR libreoffice-writer-extensions-6.0.5.2-3.3 is installed OR libreofficekit-6.0.5.2-3.3 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND conntrack-tools-1.4.2-5 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information libvirt-2.0.0-27.45 is installed OR libvirt-client-2.0.0-27.45 is installed OR libvirt-daemon-2.0.0-27.45 is installed OR libvirt-daemon-config-network-2.0.0-27.45 is installed OR libvirt-daemon-config-nwfilter-2.0.0-27.45 is installed OR libvirt-daemon-driver-interface-2.0.0-27.45 is installed OR libvirt-daemon-driver-libxl-2.0.0-27.45 is installed OR libvirt-daemon-driver-lxc-2.0.0-27.45 is installed OR libvirt-daemon-driver-network-2.0.0-27.45 is installed OR libvirt-daemon-driver-nodedev-2.0.0-27.45 is installed OR libvirt-daemon-driver-nwfilter-2.0.0-27.45 is installed OR libvirt-daemon-driver-qemu-2.0.0-27.45 is installed OR libvirt-daemon-driver-secret-2.0.0-27.45 is installed OR libvirt-daemon-driver-storage-2.0.0-27.45 is installed OR libvirt-daemon-hooks-2.0.0-27.45 is installed OR libvirt-daemon-lxc-2.0.0-27.45 is installed OR libvirt-daemon-qemu-2.0.0-27.45 is installed OR libvirt-daemon-xen-2.0.0-27.45 is installed OR libvirt-doc-2.0.0-27.45 is installed OR libvirt-lock-sanlock-2.0.0-27.45 is installed OR libvirt-nss-2.0.0-27.45 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information pdns-4.1.2-3.3 is installed OR pdns-backend-mysql-4.1.2-3.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information glib2-2.48.2-12.15 is installed OR glib2-lang-2.48.2-12.15 is installed OR glib2-tools-2.48.2-12.15 is installed OR libgio-2_0-0-2.48.2-12.15 is installed OR libgio-2_0-0-32bit-2.48.2-12.15 is installed OR libglib-2_0-0-2.48.2-12.15 is installed OR libglib-2_0-0-32bit-2.48.2-12.15 is installed OR libgmodule-2_0-0-2.48.2-12.15 is installed OR libgmodule-2_0-0-32bit-2.48.2-12.15 is installed OR libgobject-2_0-0-2.48.2-12.15 is installed OR libgobject-2_0-0-32bit-2.48.2-12.15 is installed OR libgthread-2_0-0-2.48.2-12.15 is installed OR libgthread-2_0-0-32bit-2.48.2-12.15 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 9 is installed AND python-Twisted-15.2.1-9.8 is installed
BACK