gpp_maybe Security update for openldap2

SUSE-SLE-SERVER-12-2019-931

This update for openldap2 fixes the following issues: Security issues fixed: - CVE-2017-9287: A double free vulnerability in the mdb backend during search with page size 0 was fixed (bsc#1041764). - CVE-2017-17740: Fixed a denial of service (slapd crash) via a member MODDN operation that could have been triggered when both the nops module and the memberof overlay are enabled (bsc#1073313). Non-security issues fixed: - Fix a regression in handling of non-blocking connections (bsc#1031702) - Fix an uninitialised variable that causes startup failure (bsc#1037396) - Fix libldap leaks socket descriptors issue (bsc#1065083)

• Release Date
  Apr 11 2019
• References
  Bugzilla: 1031702, 1041764, 1037396, 1065083, 1073313
  CVEs: CVE-2017-17740, CVE-2017-9287
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12 x86_64

• Packages
  libldap-2_4-2
  OpenLDAP Client Libraries

  2.4.41-18.24.9.1 lock rpm

  libldap-2_4-2-32bit
  OpenLDAP Client Libraries

  2.4.41-18.24.9.1 lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.24.9.7 lock rpm lock src

  openldap2-back-meta
  OpenLDAP Meta Back-End

  2.4.41-18.24.9.7 lock rpm

  openldap2-client
  The OpenLDAP commandline client tools

  2.4.41-18.24.9.1 lock rpm lock src

SUSE Linux Enterprise Server LTSS 12 s390x

• Packages
  libldap-2_4-2
  OpenLDAP Client Libraries

  2.4.41-18.24.9.1 lock rpm

  libldap-2_4-2-32bit
  OpenLDAP Client Libraries

  2.4.41-18.24.9.1 lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.24.9.7 lock rpm lock src

  openldap2-back-meta
  OpenLDAP Meta Back-End

  2.4.41-18.24.9.7 lock rpm

  openldap2-client
  The OpenLDAP commandline client tools

  2.4.41-18.24.9.1 lock rpm lock src