SUSE-SU-2020:1210-1

Details

Description of the patch:

This update for openldap2 fixes the following issues:

CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771).
CVE-2019-13565: Fixed an authentication bypass caused by incorrect authorization of another connection, granting excess connection rights (bsc#1143194).
CVE-2019-13057: Fixed an issue with improper authorization with delegated database admin privileges (bsc#1143273).

Affected Packages

compat-libldap-2_3-0

SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server for SAP Applications 12 SP1SUSE Linux Enterprise Server for SAP Applications 12 SP2SUSE Linux Enterprise Server for SAP Applications 12 SP3SUSE Linux Enterprise Server for SAP Applications 12 SP4

Fixed in:

2.3.37-18.24.17.1

libldap-2_4-2

SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 12 SP1

Fixed in:

2.4.41-18.24.17.1

libldap-2_4-2-32bit

SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 12 SP1

Fixed in:

2.4.41-18.24.17.1

openldap2

SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 12 SP1