Oval Definition:oval:org.opensuse.security:def:64663
Revision Date:2021-03-08Version:1
Title:Security update for openldap2 (Important)
Description:

This update for openldap2 fixes the following issues:

- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service. - bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN parsing in ad_keystring, resulting in denial of service. - bsc#1182412 CVE-2020-36228 - integer underflow leading to crash in the Certificate List Exact Assertion processing, resulting in denial of service. - bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service. - bsc#1182416 CVE-2020-36225 - double free and slapd crash in the saslAuthzTo processing, resulting in denial of service. - bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service. - bsc#1182415 CVE-2020-36226 - memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service. - bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service. - bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck). - bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read). - bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.
Family:unixClass:patch
Status:Reference(s):1155346
1157775
1158101
1158809
1163889
1171655
1174457
1177351
1177352
1177408
1182279
1182408
1182411
1182412
1182413
1182415
1182416
1182417
1182418
1182419
1182420
CVE-2009-2411
CVE-2010-3315
CVE-2010-4539
CVE-2010-4644
CVE-2011-0715
CVE-2011-1752
CVE-2011-1783
CVE-2011-1921
CVE-2013-1845
CVE-2013-1846
CVE-2013-1847
CVE-2013-1849
CVE-2013-1884
CVE-2013-1968
CVE-2013-2088
CVE-2013-2112
CVE-2013-4131
CVE-2013-4246
CVE-2013-4262
CVE-2013-4277
CVE-2013-4505
CVE-2013-4558
CVE-2014-0032
CVE-2014-3522
CVE-2014-3528
CVE-2014-3580
CVE-2014-8108
CVE-2015-0202
CVE-2015-0248
CVE-2015-0251
CVE-2015-3184
CVE-2015-3187
CVE-2015-5259
CVE-2015-5343
CVE-2016-2167
CVE-2016-2168
CVE-2016-8734
CVE-2016-9843
CVE-2017-9800
CVE-2018-11803
CVE-2019-1551
CVE-2020-13696
CVE-2020-15917
CVE-2020-15967
CVE-2020-15968
CVE-2020-15969
CVE-2020-15970
CVE-2020-15971
CVE-2020-15972
CVE-2020-15973
CVE-2020-15974
CVE-2020-15975
CVE-2020-15976
CVE-2020-15977
CVE-2020-15978
CVE-2020-15979
CVE-2020-15980
CVE-2020-15981
CVE-2020-15982
CVE-2020-15983
CVE-2020-15984
CVE-2020-15985
CVE-2020-15986
CVE-2020-15987
CVE-2020-15988
CVE-2020-15989
CVE-2020-15990
CVE-2020-15991
CVE-2020-15992
CVE-2020-36221
CVE-2020-36222
CVE-2020-36223
CVE-2020-36224
CVE-2020-36225
CVE-2020-36226
CVE-2020-36227
CVE-2020-36228
CVE-2020-36229
CVE-2020-36230
CVE-2020-6557
CVE-2020-7069
CVE-2020-7070
CVE-2020-8955
CVE-2021-27212
openSUSE-SU-2020:0062-1
openSUSE-SU-2020:0248-1
openSUSE-SU-2020:0784-1
openSUSE-SU-2020:1139-1
openSUSE-SU-2020:1703-1
openSUSE-SU-2020:1705-1
SUSE-SU-2021:0723-1
Platform(s):openSUSE Leap 15.1
openSUSE Leap 15.2
SUSE Linux Enterprise Desktop 15 SP2
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Module for Development Tools 15 SP1
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Storage 7
SUSE Manager Proxy 4.1
SUSE Manager Server 4.1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • weechat-2.1-lp151.3.3 is installed
  • OR weechat-aspell-2.1-lp151.3.3 is installed
  • OR weechat-devel-2.1-lp151.3.3 is installed
  • OR weechat-guile-2.1-lp151.3.3 is installed
  • OR weechat-lang-2.1-lp151.3.3 is installed
  • OR weechat-lua-2.1-lp151.3.3 is installed
  • OR weechat-perl-2.1-lp151.3.3 is installed
  • OR weechat-python-2.1-lp151.3.3 is installed
  • OR weechat-ruby-2.1-lp151.3.3 is installed
  • OR weechat-tcl-2.1-lp151.3.3 is installed
  • Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • claws-mail-3.17.6-lp152.3.3 is installed
  • OR claws-mail-devel-3.17.6-lp152.3.3 is installed
  • OR claws-mail-lang-3.17.6-lp152.3.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND Package Information
  • libldap-2_4-2-2.4.46-9.48.1 is installed
  • OR libldap-2_4-2-32bit-2.4.46-9.48.1 is installed
  • OR libldap-data-2.4.46-9.48.1 is installed
  • OR openldap2-client-2.4.46-9.48.1 is installed
  • OR openldap2-devel-2.4.46-9.48.1 is installed
  • OR openldap2-devel-static-2.4.46-9.48.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed
  • AND zlib-devel-32bit-1.2.11-3.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND subversion-server-1.10.0-3.3 is installed
  • BACK