File _patchinfo of Package patchinfo.14832

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.14832

<patchinfo incident="14832">
  <issue tracker="bnc" id="1170771">VUL-0: CVE-2020-12243: openldap2: LDAP search filters with nested boolean expressions can result in denial of service (daemon crash)</issue>
  <issue tracker="bnc" id="1143194">VUL-0: CVE-2019-13565: openldap2: successful authorization step completed by one user affects the authorization requirement for a different user</issue>
  <issue tracker="bnc" id="1143273">VUL-0: CVE-2019-13057: openldap2: slapd does not properly stop a rootDN from requesting authorization as an identity from another database</issue>
  <issue tracker="cve" id="2019-13565"/>
  <issue tracker="cve" id="2019-13057"/>
  <issue tracker="cve" id="2020-12243"/>
  <packager>firstyear</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for openldap2</summary>
  <description>This update for openldap2 fixes the following issues:

- CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771).
- CVE-2019-13565: Fixed an authentication bypass caused by incorrect authorization of another connection, granting excess connection rights (bsc#1143194).
- CVE-2019-13057: Fixed an issue with improper authorization with delegated database admin privileges (bsc#1143273).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.14832

Places