Skip to content
OpenAdvisories
Medium ALAS2-2021-1707 1 CVE

Moderate: openldap security update (Amazon Linux 2)

Published Sep 8, 2021 · Updated Sep 15, 2021

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-36225: A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service. 1921385: CVE-2020-36225 openldap: Double free in the saslAuthzTo processing

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2 openldap 0:2.4.44-23.amzn2.0.2
Amazon Linux · 2 openldap-clients 0:2.4.44-23.amzn2.0.2
Amazon Linux · 2 openldap-debuginfo 0:2.4.44-23.amzn2.0.2
Amazon Linux · 2 openldap-devel 0:2.4.44-23.amzn2.0.2
Amazon Linux · 2 openldap-servers 0:2.4.44-23.amzn2.0.2
Amazon Linux · 2 openldap-servers-sql 0:2.4.44-23.amzn2.0.2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-36225.html