shield Security update for openldap2

SUSE-SLE-SERVER-12-SP4-2019-2390

This update for openldap2 fixes the following issues: Security issues fixed: - CVE-2019-13565: Fixed ssf memory reuse that leads to incorrect authorization of another connection, granting excess connection rights (ssf) (bsc#1143194). - CVE-2019-13057: Fixed rootDN of a backend that may proxyauth incorrectly to another backend, violating multi-tenant isolation (bsc#1143273).

• Release Date
  Sep 17 2019
• References
  Bugzilla: 1143194, 1143273
  CVEs: CVE-2019-13565, CVE-2019-13057
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 aarch64

• Packages
  libldap-2_4-2
  OpenLDAP Client Libraries

  2.4.41-18.63.1

  lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.63.1

  lock rpm

  lock src

  openldap2-back-meta
  OpenLDAP Meta Back-End

  2.4.41-18.63.1

  lock rpm

  openldap2-client
  OpenLDAP client utilities

  2.4.41-18.63.1

  lock rpm

  openldap2-doc
  OpenLDAP Documentation

  2.4.41-18.63.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  libldap-2_4-2
  OpenLDAP Client Libraries

  2.4.41-18.63.1

  lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.63.1

  lock rpm

  lock src

  openldap2-back-meta
  OpenLDAP Meta Back-End

  2.4.41-18.63.1

  lock rpm

  openldap2-client
  OpenLDAP client utilities

  2.4.41-18.63.1

  lock rpm

  openldap2-doc
  OpenLDAP Documentation

  2.4.41-18.63.1

  lock rpm

SUSE Linux Enterprise Server 12.4 s390x

• Packages
  libldap-2_4-2
  OpenLDAP Client Libraries

  2.4.41-18.63.1

  lock rpm

  libldap-2_4-2-32bit
  OpenLDAP Client Libraries

  2.4.41-18.63.1

  lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.63.1

  lock rpm

  lock src

  openldap2-back-meta
  OpenLDAP Meta Back-End

  2.4.41-18.63.1

  lock rpm

  openldap2-client
  OpenLDAP client utilities

  2.4.41-18.63.1

  lock rpm

  openldap2-doc
  OpenLDAP Documentation

  2.4.41-18.63.1

  lock rpm

SUSE Linux Enterprise Server 12.4 x86_64

• Packages
  libldap-2_4-2
  OpenLDAP Client Libraries

  2.4.41-18.63.1

  lock rpm

  libldap-2_4-2-32bit
  OpenLDAP Client Libraries

  2.4.41-18.63.1

  lock rpm

  openldap2
  The OpenLDAP Server

  2.4.41-18.63.1

  lock rpm

  lock src

  openldap2-back-meta
  OpenLDAP Meta Back-End

  2.4.41-18.63.1

  lock rpm

  openldap2-client
  OpenLDAP client utilities

  2.4.41-18.63.1

  lock rpm

  openldap2-doc
  OpenLDAP Documentation

  2.4.41-18.63.1

  lock rpm