gpp_maybe Security update for openldap2

SUSE-SLE-Module-Legacy-12-2016-139

This update fixes the following security issues: - CVE-2015-6908: The ber_get_next function allowed remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd. (bsc#945582) - CVE-2015-4000: Fix weak Diffie-Hellman size vulnerability. (bsc#937766) It also fixes the following non-security bugs: - bsc#955210: Unresponsive LDAP host lookups in IPv6 environment This update adds the following functionality: - fate#319300: SHA2 password hashing module that can be loaded on-demand.

• Release Date
  Jan 25 2016
• References
  Bugzilla: 945582, 937766, 955210
  CVEs: CVE-2015-6908, CVE-2015-4000
• Type
  security
• Severity
  important

cloud_download Downloads

Legacy Module 12 x86_64

• Packages
  compat-libldap-2_3-0
  OpenLDAP Client Libraries

  2.3.37-18.13.4 lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.13.4 lock src

Legacy Module 12 s390x

• Packages
  compat-libldap-2_3-0
  OpenLDAP Client Libraries

  2.3.37-18.13.4 lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.13.4 lock src

Legacy Module 12 ppc64le

• Packages
  compat-libldap-2_3-0
  OpenLDAP Client Libraries

  2.3.37-18.13.4 lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.13.4 lock src