| Description: |
openldap2 was updated to fix three security issues and one non-security bug.
The following vulnerabilities were fixed:
* A remote attacker could cause a denial of service (slapd crash) by unbinding immediately after a search request. (bnc#846389, CVE-2013-4449) * A remote attacker could cause a denial of service through a NULL pointer dereference and crash via an empty attribute list in a deref control in a search request. (bnc#916897, CVE-2015-1545) * A remote attacker could cause a denial of service (crash) via a crafted search query with a matched values control. (bnc#916914, CVE-2015-1546)
The following non-security bug was fixed:
* Prevent connection-0 (internal connection) from showing up in the monitor back-end. (bnc#905959)
Security Issues:
* CVE-2015-1546 * CVE-2015-1545 * CVE-2013-4449
|