SUSE-SU-2023:2503-1

Details

This update for openldap2 fixes the following issues:

CVE-2023-2953: Fixed null pointer deref in ber_memalloc_x (bsc#1211795).

Affected Packages

compat-libldap-2_3-0

SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.3.37-45.1

openldap2

SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.4.41-45.1

References

REPORT

https://bugzilla.suse.com/1211795

WEB

https://www.suse.com/security/cve/CVE-2023-2953

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20232503-1/