Summary
[2.4.44-25]
- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | openldap | 0:2.4.44-25.el7_9 |
| Oracle Linux · 7 | openldap-clients | 0:2.4.44-25.el7_9 |
| Oracle Linux · 7 | openldap-devel | 0:2.4.44-25.el7_9 |
| Oracle Linux · 7 | openldap-servers | 0:2.4.44-25.el7_9 |
| Oracle Linux · 7 | openldap-servers-sql | 0:2.4.44-25.el7_9 |
Vulnerabilities 2
-
Unscored —
A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’…
-
Unscored —
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet proce…