File _patchinfo of Package patchinfo.14832
<patchinfo incident="14832">
<issue tracker="bnc" id="1170771">VUL-0: CVE-2020-12243: openldap2: LDAP search filters with nested boolean expressions can result in denial of service (daemon crash)</issue>
<issue tracker="bnc" id="1143194">VUL-0: CVE-2019-13565: openldap2: successful authorization step completed by one user affects the authorization requirement for a different user</issue>
<issue tracker="bnc" id="1143273">VUL-0: CVE-2019-13057: openldap2: slapd does not properly stop a rootDN from requesting authorization as an identity from another database</issue>
<issue tracker="cve" id="2019-13565"/>
<issue tracker="cve" id="2019-13057"/>
<issue tracker="cve" id="2020-12243"/>
<packager>firstyear</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for openldap2</summary>
<description>This update for openldap2 fixes the following issues:
- CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771).
- CVE-2019-13565: Fixed an authentication bypass caused by incorrect authorization of another connection, granting excess connection rights (bsc#1143194).
- CVE-2019-13057: Fixed an issue with improper authorization with delegated database admin privileges (bsc#1143273).
</description>
</patchinfo>