gpp_maybe Security update for openldap2

SUSE-SLE-SAP-12-SP2-2020-1859

This update for openldap2 fixes the following issues: - CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAP_CONFIG_BACKEND="ldap" was used (bsc#1172698). - Changed DB_CONFIG to root:ldap permissions (bsc#1172704). - Fixed an issue where slapd becomes unresponsive after many failed login/bind attempts(bsc#1170715).

• Release Date
  Jul 6 2020
• References
  Bugzilla: 1172704, 1172698, 1170715
  CVEs: CVE-2020-8023
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  libldap-2_4-2
  OpenLDAP Client Libraries

  2.4.41-18.71.2 lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.71.2 lock rpm lock src

  openldap2-back-meta
  OpenLDAP Meta Back-End

  2.4.41-18.71.2 lock rpm

  openldap2-client
  OpenLDAP client utilities

  2.4.41-18.71.2 lock rpm

  openldap2-doc
  OpenLDAP Documentation

  2.4.41-18.71.2 lock rpm

  openldap2-ppolicy-check-password
  Password quality check module for OpenLDAP

  1.2-18.71.2 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64

• Packages
  libldap-2_4-2
  OpenLDAP Client Libraries

  2.4.41-18.71.2 lock rpm

  libldap-2_4-2-32bit
  OpenLDAP Client Libraries

  2.4.41-18.71.2 lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.71.2 lock rpm lock src

  openldap2-back-meta
  OpenLDAP Meta Back-End

  2.4.41-18.71.2 lock rpm

  openldap2-client
  OpenLDAP client utilities

  2.4.41-18.71.2 lock rpm

  openldap2-doc
  OpenLDAP Documentation

  2.4.41-18.71.2 lock rpm

  openldap2-ppolicy-check-password
  Password quality check module for OpenLDAP

  1.2-18.71.2 lock rpm