openSUSE-SU-2021:0102-1

Details

This update for openldap2 fixes the following issues:

Security issues fixed:

CVE-2020-25709: Fixed a crash caused by specially crafted network traffic (bsc#1178909).
CVE-2020-25710: Fixed a crash caused by specially crafted network traffic (bsc#1178909).

Non-security issue fixed:

Retry binds in the LDAP backend when the remote LDAP server disconnected the (idle) LDAP connection. (bsc#1179503)

This update was imported from the SUSE:SLE-15:Update update project.

Affected Packages(15 packages)

libldap-2_4-2

openSUSE Leap 15.1

Fixed in:

2.4.46-lp151.10.24.1

libldap-2_4-2-32bit

openSUSE Leap 15.1

Fixed in:

2.4.46-lp151.10.24.1

libldap-data

openSUSE Leap 15.1

Fixed in:

2.4.46-lp151.10.24.1

openldap2

openSUSE Leap 15.1

Fixed in:

2.4.46-lp151.10.24.1

openldap2-back-meta

openSUSE Leap 15.1

Fixed in:

2.4.46-lp151.10.24.1

openldap2-back-perl

openSUSE Leap 15.1

Fixed in:

2.4.46-lp151.10.24.1

openldap2-back-sock

openSUSE Leap 15.1

Fixed in:

2.4.46-lp151.10.24.1

openldap2-back-sql

openSUSE Leap 15.1

Fixed in:

2.4.46-lp151.10.24.1

openldap2-client

openSUSE Leap 15.1

Fixed in:

2.4.46-lp151.10.24.1

openldap2-contrib

openSUSE Leap 15.1

Fixed in:

2.4.46-lp151.10.24.1

References

REPORT

https://bugzilla.suse.com/1178909

REPORT

https://bugzilla.suse.com/1179503

ADVISORY

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HXI5DVBGML6XRCQGGMOYKQFUJDZ2JPS6/

WEB

https://www.suse.com/security/cve/CVE-2020-25709

WEB

https://www.suse.com/security/cve/CVE-2020-25710