gpp_maybe Security update for openldap2

SUSE-SLE-Module-Legacy-12-2019-931

This update for openldap2 fixes the following issues: Security issues fixed: - CVE-2017-9287: A double free vulnerability in the mdb backend during search with page size 0 was fixed (bsc#1041764). - CVE-2017-17740: Fixed a denial of service (slapd crash) via a member MODDN operation that could have been triggered when both the nops module and the memberof overlay are enabled (bsc#1073313). Non-security issues fixed: - Fix a regression in handling of non-blocking connections (bsc#1031702) - Fix an uninitialised variable that causes startup failure (bsc#1037396) - Fix libldap leaks socket descriptors issue (bsc#1065083)

• Release Date
  Apr 11 2019
• References
  Bugzilla: 1031702, 1041764, 1037396, 1065083, 1073313
  CVEs: CVE-2017-17740, CVE-2017-9287
• Type
  security
• Severity
  important

cloud_download Downloads

Legacy Module 12 s390x

• Packages
  compat-libldap-2_3-0
  OpenLDAP Client Libraries

  2.3.37-18.24.9.7 lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.24.9.7 lock src

Legacy Module 12 x86_64

• Packages
  compat-libldap-2_3-0
  OpenLDAP Client Libraries

  2.3.37-18.24.9.7 lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.24.9.7 lock src

Legacy Module 12 ppc64le

• Packages
  compat-libldap-2_3-0
  OpenLDAP Client Libraries

  2.3.37-18.24.9.7 lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.24.9.7 lock src