gpp_maybe Security update for openldap2

SUSE-SLE-Module-Legacy-12-2020-1210

This update for openldap2 fixes the following issues: - CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771). - CVE-2019-13565: Fixed an authentication bypass caused by incorrect authorization of another connection, granting excess connection rights (bsc#1143194). - CVE-2019-13057: Fixed an issue with improper authorization with delegated database admin privileges (bsc#1143273).

• Release Date
  May 7 2020
• References
  Bugzilla: 1170771, 1143194, 1143273
  CVEs: CVE-2019-13565, CVE-2019-13057, CVE-2020-12243
• Type
  security
• Severity
  important

cloud_download Downloads

Legacy Module 12 ppc64le

• Packages
  compat-libldap-2_3-0
  OpenLDAP Client Libraries

  2.3.37-18.24.17.1 lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.24.17.1 lock src

Legacy Module 12 x86_64

• Packages
  compat-libldap-2_3-0
  OpenLDAP Client Libraries

  2.3.37-18.24.17.1 lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.24.17.1 lock src

Legacy Module 12 s390x

• Packages
  compat-libldap-2_3-0
  OpenLDAP Client Libraries

  2.3.37-18.24.17.1 lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.24.17.1 lock src