| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for openldap2 (Important) |
| Description: |
This update for openldap2 fixes the following issues:
- CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAP_CONFIG_BACKEND='ldap' was used (bsc#1172698). - Changed DB_CONFIG to root:ldap permissions (bsc#1172704).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1055186
1065600
1065729
1066382
1094244
1112178
1113956
1121571
1121816
1121818
1121821
1140868
1144903
1149032
1153108
1153158
1153161
1154366
1156402
1162117
1163592
1164648
1166844
1166916
1167527
1169972
1170415
1171688
1171742
1172442
1172443
1172698
1172704
1173115
1174157
1174899
1175228
1175721
1175749
1175882
1176011
1176022
1176038
1176235
1176242
1176278
1176316
1176317
1176318
1176319
1176320
1176321
1176354
1176381
1176410
1176423
1176482
1176507
1176536
1176544
1176545
1176546
1176548
1176659
1176698
1176699
1176700
1176721
1176722
1176725
1176732
1176788
1176789
1176869
1176877
1176935
1176950
1176962
1176966
1176990
1177030
1177041
1177042
1177043
1177044
1177121
1177143
1177206
1177281
1177291
1177293
1177294
1177295
1177296
1177513
1177729
1177766
1177799
1177801
1178166
1178173
1178175
1178176
1178177
1178183
1178184
1178185
1178186
1178190
1178191
1178255
1178307
1178330
1178395
CVE-2009-0946
CVE-2010-2497
CVE-2010-2805
CVE-2010-3053
CVE-2010-3054
CVE-2010-3311
CVE-2010-3814
CVE-2011-0226
CVE-2011-3146
CVE-2011-4405
CVE-2012-5668
CVE-2012-5669
CVE-2012-5670
CVE-2013-1881
CVE-2014-1932
CVE-2014-2653
CVE-2015-5352
CVE-2015-5600
CVE-2015-6563
CVE-2015-6564
CVE-2018-20685
CVE-2019-10220
CVE-2019-11709
CVE-2019-11711
CVE-2019-11712
CVE-2019-11713
CVE-2019-11715
CVE-2019-11717
CVE-2019-11719
CVE-2019-11729
CVE-2019-11730
CVE-2019-17133
CVE-2019-2201
CVE-2019-6109
CVE-2019-6110
CVE-2019-6111
CVE-2019-9811
CVE-2020-0404
CVE-2020-0427
CVE-2020-0431
CVE-2020-0432
CVE-2020-10531
CVE-2020-11080
CVE-2020-12351
CVE-2020-14381
CVE-2020-14390
CVE-2020-14556
CVE-2020-14562
CVE-2020-14573
CVE-2020-14577
CVE-2020-14581
CVE-2020-14583
CVE-2020-14593
CVE-2020-14621
CVE-2020-25212
CVE-2020-25219
CVE-2020-25284
CVE-2020-25641
CVE-2020-25643
CVE-2020-25645
CVE-2020-25656
CVE-2020-25705
CVE-2020-26088
CVE-2020-26154
CVE-2020-7598
CVE-2020-8023
CVE-2020-8174
CVE-2020-8694
SUSE-SU-2019:0126-1
SUSE-SU-2019:1960-1
SUSE-SU-2019:2971-2
SUSE-SU-2020:1568-1
SUSE-SU-2020:1856-1
SUSE-SU-2020:2143-1
SUSE-SU-2020:2901-1
SUSE-SU-2020:2906-1
SUSE-SU-2020:3273-1
|
| Platform(s): | openSUSE Leap 15.0
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1
SUSE Linux Enterprise Module for Development Tools 15 SP1
SUSE Linux Enterprise Module for Development Tools 15 SP2
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Live Patching 15 SP2
SUSE Linux Enterprise Module for Public Cloud 15 SP1
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.0 is installed AND libpcre2-8-0-10.31-lp150.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP3 is installed
AND Package Information
flash-player-11.2.202.481-0.8 is installed
OR flash-player-gnome-11.2.202.481-0.8 is installed
OR flash-player-kde4-11.2.202.481-0.8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP4 is installed
AND Package Information
flash-player-11.2.202.491-0.11 is installed
OR flash-player-gnome-11.2.202.491-0.11 is installed
OR flash-player-kde4-11.2.202.491-0.11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND ft2demos-2.5.3-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
gdk-pixbuf-loader-rsvg-2.40.2-1 is installed
OR librsvg-2-2-2.40.2-1 is installed
OR librsvg-2-2-32bit-2.40.2-1 is installed
OR rsvg-view-2.40.2-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
libXcursor1-1.1.14-3 is installed
OR libXcursor1-32bit-1.1.14-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
imobiledevice-tools-1.2.0-7 is installed
OR libimobiledevice6-1.2.0-7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
aaa_base-13.2+git20140911.61c1681-38.8 is installed
OR aaa_base-extras-13.2+git20140911.61c1681-38.8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed
AND libjpeg-turbo-1.5.3-5.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed
AND Package Information
openldap2-2.4.46-9.31 is installed
OR openldap2-devel-32bit-2.4.46-9.31 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed
AND Package Information
libproxy-plugins-0.4.15-4.3 is installed
OR perl-Net-Libproxy-0.4.15-4.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
AND Package Information
kernel-livepatch-4_12_14-197_4-default-6-2 is installed
OR kernel-livepatch-SLE15-SP1_Update_1-6-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed
AND Package Information
kernel-default-5.3.18-24.37 is installed
OR kernel-default-livepatch-5.3.18-24.37 is installed
OR kernel-default-livepatch-devel-5.3.18-24.37 is installed
OR kernel-livepatch-5_3_18-24_37-default-1-5.3 is installed
OR kernel-livepatch-SLE15-SP2_Update_7-1-5.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
AND Package Information
kernel-azure-4.12.14-8.47 is installed
OR kernel-azure-base-4.12.14-8.47 is installed
OR kernel-azure-devel-4.12.14-8.47 is installed
OR kernel-devel-azure-4.12.14-8.47 is installed
OR kernel-source-azure-4.12.14-8.47 is installed
OR kernel-syms-azure-4.12.14-8.47 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 is installed
AND Package Information
openssh-7.6p1-9.13 is installed
OR openssh-fips-7.6p1-9.13 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND Package Information
cpio-2.11-29 is installed
OR cpio-lang-2.11-29 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kgraft-patch-3_12_67-60_64_24-default-8-2 is installed
OR kgraft-patch-3_12_67-60_64_24-xen-8-2 is installed
OR kgraft-patch-SLE12-SP1_Update_11-8-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
java-1_7_0-openjdk-1.7.0.111-33 is installed
OR java-1_7_0-openjdk-demo-1.7.0.111-33 is installed
OR java-1_7_0-openjdk-devel-1.7.0.111-33 is installed
OR java-1_7_0-openjdk-headless-1.7.0.111-33 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
libdcerpc-atsvc0-4.2.4-28.29 is installed
OR samba-4.2.4-28.29 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
libvirt-2.0.0-27.42 is installed
OR libvirt-client-2.0.0-27.42 is installed
OR libvirt-daemon-2.0.0-27.42 is installed
OR libvirt-daemon-config-network-2.0.0-27.42 is installed
OR libvirt-daemon-config-nwfilter-2.0.0-27.42 is installed
OR libvirt-daemon-driver-interface-2.0.0-27.42 is installed
OR libvirt-daemon-driver-libxl-2.0.0-27.42 is installed
OR libvirt-daemon-driver-lxc-2.0.0-27.42 is installed
OR libvirt-daemon-driver-network-2.0.0-27.42 is installed
OR libvirt-daemon-driver-nodedev-2.0.0-27.42 is installed
OR libvirt-daemon-driver-nwfilter-2.0.0-27.42 is installed
OR libvirt-daemon-driver-qemu-2.0.0-27.42 is installed
OR libvirt-daemon-driver-secret-2.0.0-27.42 is installed
OR libvirt-daemon-driver-storage-2.0.0-27.42 is installed
OR libvirt-daemon-hooks-2.0.0-27.42 is installed
OR libvirt-daemon-lxc-2.0.0-27.42 is installed
OR libvirt-daemon-qemu-2.0.0-27.42 is installed
OR libvirt-daemon-xen-2.0.0-27.42 is installed
OR libvirt-doc-2.0.0-27.42 is installed
OR libvirt-lock-sanlock-2.0.0-27.42 is installed
OR libvirt-nss-2.0.0-27.42 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
kgraft-patch-4_4_74-92_38-default-9-2 is installed
OR kgraft-patch-SLE12-SP2_Update_13-9-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND busybox-1.21.1-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
AND Package Information
java-1_8_0-ibm-1.8.0_sr5.40-30.54 is installed
OR java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54 is installed
OR java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
kgraft-patch-4_4_178-94_91-default-6-2 is installed
OR kgraft-patch-SLE12-SP3_Update_25-6-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
java-1_7_1-ibm-1.7.1_sr4.30-38.26 is installed
OR java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26 is installed
OR java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26 is installed
OR java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND Package Information
curl-7.60.0-2 is installed
OR libcurl4-7.60.0-2 is installed
OR libcurl4-32bit-7.60.0-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 15-LTSS is installed
AND Package Information
nodejs10-10.21.0-1.21 is installed
OR nodejs10-devel-10.21.0-1.21 is installed
OR nodejs10-docs-10.21.0-1.21 is installed
OR npm10-10.21.0-1.21 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for SAP Applications 15 is installed
AND Package Information
java-11-openjdk-11.0.8.0-3.45 is installed
OR java-11-openjdk-demo-11.0.8.0-3.45 is installed
OR java-11-openjdk-devel-11.0.8.0-3.45 is installed
OR java-11-openjdk-headless-11.0.8.0-3.45 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 is installed
AND Package Information
MozillaThunderbird-60.8.0-3.46 is installed
OR MozillaThunderbird-translations-common-60.8.0-3.46 is installed
OR MozillaThunderbird-translations-other-60.8.0-3.46 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6 is installed
AND Package Information
rabbitmq-server-3.4.4-2 is installed
OR rabbitmq-server-plugins-3.4.4-2 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 7 is installed
AND Package Information
MozillaFirefox-60.2.2esr-109.46 is installed
OR MozillaFirefox-branding-SLE-60-32.3 is installed
OR MozillaFirefox-devel-60.2.2esr-109.46 is installed
OR MozillaFirefox-translations-common-60.2.2esr-109.46 is installed
OR apache2-mod_nss-1.0.14-19.6 is installed
OR libfreebl3-3.36.4-58.15 is installed
OR libfreebl3-32bit-3.36.4-58.15 is installed
OR libfreebl3-hmac-3.36.4-58.15 is installed
OR libfreebl3-hmac-32bit-3.36.4-58.15 is installed
OR libsoftokn3-3.36.4-58.15 is installed
OR libsoftokn3-32bit-3.36.4-58.15 is installed
OR libsoftokn3-hmac-3.36.4-58.15 is installed
OR libsoftokn3-hmac-32bit-3.36.4-58.15 is installed
OR mozilla-nspr-4.19-19.3 is installed
OR mozilla-nspr-32bit-4.19-19.3 is installed
OR mozilla-nss-3.36.4-58.15 is installed
OR mozilla-nss-32bit-3.36.4-58.15 is installed
OR mozilla-nss-certs-3.36.4-58.15 is installed
OR mozilla-nss-certs-32bit-3.36.4-58.15 is installed
OR mozilla-nss-sysinit-3.36.4-58.15 is installed
OR mozilla-nss-sysinit-32bit-3.36.4-58.15 is installed
OR mozilla-nss-tools-3.36.4-58.15 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND Package Information
mariadb-10.2.22-4.11 is installed
OR mariadb-client-10.2.22-4.11 is installed
OR mariadb-errormessages-10.2.22-4.11 is installed
OR mariadb-galera-10.2.22-4.11 is installed
OR mariadb-tools-10.2.22-4.11 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND python-Werkzeug-0.12.2-3.3 is installed
|