Medium ELSA-2021-1389 1 CVE

Moderate: openldap security update (Oracle Linux 7)

Published Apr 28, 2021 · Updated Apr 28, 2021

Ecosystem: Oracle Linux

Summary

[2.4.44-23]
- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	openldap	0:2.4.44-23.el7_9
Oracle Linux · 7	openldap-clients	0:2.4.44-23.el7_9
Oracle Linux · 7	openldap-devel	0:2.4.44-23.el7_9
Oracle Linux · 7	openldap-servers	0:2.4.44-23.el7_9
Oracle Linux · 7	openldap-servers-sql	0:2.4.44-23.el7_9

Vulnerabilities 1

Unscored —

CVE-2020-25692

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming…

openldap openldap openldap Debian Ubuntu Alpine

Dec 8, 2020