gpp_maybe Security update for openldap2

SUSE-SLE-DESKTOP-12-2016-139

This update fixes the following security issues: - CVE-2015-6908: The ber_get_next function allowed remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd. (bsc#945582) - CVE-2015-4000: Fix weak Diffie-Hellman size vulnerability. (bsc#937766) It also fixes the following non-security bugs: - bsc#955210: Unresponsive LDAP host lookups in IPv6 environment This update adds the following functionality: - fate#319300: SHA2 password hashing module that can be loaded on-demand.

• Release Date
  Jan 25 2016
• References
  Bugzilla: 945582, 937766, 955210
  CVEs: CVE-2015-6908, CVE-2015-4000
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Desktop 12 x86_64

• Packages
  libldap-2_4-2
  OpenLDAP Client Libraries

  2.4.41-18.13.1

  lock rpm

  libldap-2_4-2-32bit
  OpenLDAP Client Libraries

  2.4.41-18.13.1

  lock rpm

  openldap2-client
  The OpenLDAP commandline client tools

  2.4.41-18.13.1

  lock rpm

  lock src