< back to search

shield Security update for openldap2
SUSE-SLE-Module-Development-Tools-15-SP1-2019-2395

This update for openldap2 fixes the following issues: Security issue fixed: - CVE-2019-13565: Fixed an authentication bypass when using SASL authentication and session encryption (bsc#1143194). - CVE-2019-13057: Fixed an issue with delegated database admin privileges (bsc#1143273). - CVE-2017-17740: When both the nops module and the member of overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation. (bsc#1073313) Non-security issues fixed: - Fixed broken shebang line in openldap_update_modules_path.sh (bsc#1114845). - Create files in /var/lib/ldap/ during initial start to allow for transactional updates (bsc#1111388) - Fixed incorrect post script call causing tmpfiles creation not to be run (bsc#1111388).

cloud_download Downloads

Development Tools Module 15.1 x86_64
  • Packages
    openldap2
    An open source implementation of the Lightweight Directory Access Protocol
    2.4.46-9.19.2 lock src
    openldap2-devel-32bit
    Libraries, Header Files and Documentation for OpenLDAP
    2.4.46-9.19.2 lock rpm