openSUSE Security Update : openldap2 (openSUSE-2021-408)

This update for openldap2 fixes the following issues : - bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. - bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resultin...

OPENSUSE-SU-2021:0408-1 Security update for openldap2

This update for openldap2 fixes the following issues: - bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. - bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting...

Security update for openldap2 (important)

openSUSE Security Update: Security update for openldap2 Announcement ID: openSUSE-SU-2021:0408-1 Rating: important References: 1182279 1182408 1182411 1182412 1182413 1182415 1182416 1182417 1182418 1182419 1182420 Cross-References: CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224...

SUSE SLED15 / SLES15 Security Update : openldap2 (SUSE-SU-2021:0723-1)

This update for openldap2 fixes the following issues : bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting in...

SUSE-SU-2021:0723-1 Security update for openldap2

This update for openldap2 fixes the following issues: - bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. - bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting...

SUSE SLES12 Security Update : openldap2 (SUSE-SU-2021:0693-1)

This update for openldap2 fixes the following issues : bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting in...

SUSE SLES12 Security Update : openldap2 (SUSE-SU-2021:0692-1)

This update for openldap2 fixes the following issues : bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting in...

SUSE-SU-2021:0693-1 Security update for openldap2

This update for openldap2 fixes the following issues: - bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. - bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting...

SUSE-SU-2021:0692-1 Security update for openldap2

This update for openldap2 fixes the following issues: - bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. - bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting...

CVE-2020-8027

A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE...

CVE-2020-8027

A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE...

Design/Logic Flaw

A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE...

CVE-2020-8027

CVE-2020-8027 affects openldap2 on SLES15-LTSS, SLES15 for SAP, openSUSE Leap 15.1/15.2, with insecure temporary file handling due to openldap_update_modules_path.sh starting daemons and using fixed paths in /tmp. Affected openldap2 versions are prior to 2.4.46-9.37.1 (SLES), prior to 2.4.46-9.37...

CVE-2020-8027: Insecure Temporary File

A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE...

openSUSE Security Update : openldap2 (openSUSE-2021-102)

This update for openldap2 fixes the following issues : Security issues fixed : - CVE-2020-25709: Fixed a crash caused by specially crafted network traffic bsc1178909. - CVE-2020-25710: Fixed a crash caused by specially crafted network traffic bsc1178909. Non-security issue fixed : - Retry binds i...

openSUSE Security Update : openldap2 (openSUSE-2021-107)

This update for openldap2 fixes the following issues : Security issues fixed : - CVE-2020-25709: Fixed a crash caused by specially crafted network traffic bsc1178909. - CVE-2020-25710: Fixed a crash caused by specially crafted network traffic bsc1178909. Non-security issue fixed : - Retry binds i...

SUSE SLES12 Security Update : openldap2 (SUSE-SU-2021:0142-1)

This update for openldap2 fixes the following issues : CVE-2020-25709: Fixed a crash caused by specially crafted network traffic bsc1178909. CVE-2020-25710: Fixed a crash caused by specially crafted network traffic bsc1178909. Note that Tenable Network Security has extracted the preceding...

OPENSUSE-SU-2021:0107-1 Security update for openldap2

This update for openldap2 fixes the following issues: Security issues fixed: - CVE-2020-25709: Fixed a crash caused by specially crafted network traffic bsc1178909. - CVE-2020-25710: Fixed a crash caused by specially crafted network traffic bsc1178909. Non-security issue fixed: - Retry binds in t...

Security update for openldap2 (moderate)

openSUSE Security Update: Security update for openldap2 Announcement ID: openSUSE-SU-2021:0107-1 Rating: moderate References: 1178909 1179503 Cross-References: CVE-2020-25709 CVE-2020-25710 Affected Products: openSUSE Leap 15.2 An update that fixes two vulnerabilities is now available. Descriptio...

OPENSUSE-SU-2021:0102-1 Security update for openldap2

This update for openldap2 fixes the following issues: Security issues fixed: - CVE-2020-25709: Fixed a crash caused by specially crafted network traffic bsc1178909. - CVE-2020-25710: Fixed a crash caused by specially crafted network traffic bsc1178909. Non-security issue fixed: - Retry binds in t...