SUSE-SU-2016:0090-1

UNKNOWN

Security update for openldap2

Published Jan 12, 2016

Modified 10 years ago

Fix available

Details

Description of the patch:

This update fixes the following security issue:

CVE-2015-6908. Passing a crafted packet to the function ber_get_next(), an attacker may cause a remote denial of service, crashing the OpenLDAP server (bsc#945582).

Affected Packages(13 packages)

openldap2

SUSE Linux Enterprise Desktop 11 SP3SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP3SUSE Linux Enterprise Server 11 SP3-TERADATASUSE Linux Enterprise Server 11 SP4

Fixed in:

2.4.26-0.62.2

openldap2-back-perl

SUSE Linux Enterprise Desktop 11 SP3SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP3

Fixed in:

2.4.26-0.62.2

openldap2-devel

SUSE Linux Enterprise Desktop 11 SP3SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP3

Fixed in:

2.4.26-0.62.2

openldap2-devel-32bit

SUSE Linux Enterprise Desktop 11 SP3SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP3

Fixed in:

2.4.26-0.62.2

compat-libldap-2_3-0

SUSE Linux Enterprise Server 11 SP3-TERADATA

Fixed in:

2.3.37-2.62.2

libldap-2_4-2

SUSE Linux Enterprise Server 11 SP3-TERADATA

Fixed in:

2.4.26-0.62.2

libldap-2_4-2-32bit

SUSE Linux Enterprise Server 11 SP3-TERADATA