High ALAS2023-2023-177 1 CVE

Important: openldap security update (Amazon Linux 2023)

Published Apr 27, 2023 · Updated May 3, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-27212: In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion ... NOTE: https://bugs.openldap.org/show_bug.cgi?id=9454 NOTE: trunk: https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0 NOTE: REL_ENG 2.4.x: https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30

Fixed packages 10

Release	Package	Fixed in
Amazon Linux · 2023	openldap	0:2.4.57-6.amzn2023.0.4
Amazon Linux · 2023	openldap-clients	0:2.4.57-6.amzn2023.0.4
Amazon Linux · 2023	openldap-clients-debuginfo	0:2.4.57-6.amzn2023.0.4
Amazon Linux · 2023	openldap-compat	0:2.4.57-6.amzn2023.0.4
Amazon Linux · 2023	openldap-compat-debuginfo	0:2.4.57-6.amzn2023.0.4
Amazon Linux · 2023	openldap-debuginfo	0:2.4.57-6.amzn2023.0.4
Amazon Linux · 2023	openldap-debugsource	0:2.4.57-6.amzn2023.0.4
Amazon Linux · 2023	openldap-devel	0:2.4.57-6.amzn2023.0.4
Amazon Linux · 2023	openldap-servers	0:2.4.57-6.amzn2023.0.4
Amazon Linux · 2023	openldap-servers-debuginfo	0:2.4.57-6.amzn2023.0.4

Vulnerabilities 1

Unscored —

CVE-2021-27212 EPSS 66%

In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUp…

openldap openldap openldap openldap Debian Ubuntu Azure Linux Alpine

Feb 14, 2021

References

web
https://alas.aws.amazon.com/cve/html/CVE-2021-27212.html