ROOT-OS-DEBIAN-11-CVE-2023-2953 CVE-2023-2953 in openldap - Patched by Root

Root has patched CVE-2023-2953 in the openldap package for Root:Debian:11. Multiple fixed versions available...

OPENSUSE-SU-2026:21044-1 Security update for openssh

This update for openssh fixes the following issues Security fixes: - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables bsc1259642. - CVE-2026-35388: omitted connection multiplexing confirmation for proxy-mode multiplexing sessions bsc1261441. - openssh...

curl: CVE-2026-13608: OpenLDAP SASL authentication bypass

A vulnerability was discovered in the OpenLDAP SASL authentication mechanism in libcurl. The vulnerability could allow a malicious LDAP server to bypass SASL authentication, potentially allowing the injection of arbitrary LDAP results. The vulnerable code has been present since the OpenLDAP SASL...

LDAP Injection

Overview Affected versions of this package are vulnerable to LDAP Injection in the GetUserDN process due to improper escaping of user-controlled input when constructing LDAP search filters. An attacker can impersonate arbitrary users, including administrative accounts, by injecting crafted input...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017567)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017567 advisory. A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion i...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017537 advisory. A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancelextop Cancel operation, resulting in denial of service. Tenable h...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017543 advisory. A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch-bvlen miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017655)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017655 advisory. A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAPs slapd server, to trigger an assertion failure...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017595 advisory. In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet,...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017514 advisory. A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service double free and...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017562)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017562 advisory. A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service. Tenable has...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017555)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017555 advisory. An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017531 advisory. A flaw was discovered in ldapX509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in adkeystring, resulting in denial of service...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017568)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017568 advisory. A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017524 advisory. A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

Unity Linux 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-017508)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017508 advisory. A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service. Tenable has...

Security Bulletin: EDB PGAI Hybrid Management with IBM is affected by Multiple Vulnerabilities.

Summary Multiple Vulnerabilities found in EDB PGAI products - 1 EDB PGAI AI Factory with IBM 1.3.0, 2 EDB PGAI Analytics Accelerator 1.3.0, and 3 EDB PGAI Hybrid Data Management 1.3.0. The vulnerabilities have been addressed in 1.3.4 version. Hence, IBM strongly recommends upgrading to 1.3.4...

CLSA-2026-1777393215 openldap: Fix of 15 CVEs

CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade - CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions - CVE-2020-25692: NULL pointer dereference in slapd during modRDN request - CVE-2020-25709: slapd assertion failure...

CLSA-2026-1777310722 openldap: Fix of 15 CVEs

CVE-2019-13565: SASL session encryption SSF not reset on new connection, allowing downgrade - CVE-2020-12243: slapd crash via deeply nested LDAP search filter boolean expressions - CVE-2020-25692: NULL pointer dereference in slapd during modRDN request - CVE-2020-25709: slapd assertion failure...

CLSA-2026-1777051819 openldap: Fix of 2 CVEs

CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend to slapd - CVE-2021-27212: fix denial of service daemon exit via a short timestamp if slapd is used...