Description
A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.37.1. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.37.1. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.18.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.9.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | SUSE Linux Enterprise Server 15-LTSS | openldap2 – < 2.4.46-9.37.1 | 2.4.46-9.37.1 |
| SUSE | SUSE Linux Enterprise Server for SAP 15 | openldap2 – < 2.4.46-9.37.1 | 2.4.46-9.37.1 |
| openSUSE | openSUSE Leap 15.1 | openldap2 – < 2.4.46-lp151.10.18.1 | 2.4.46-lp151.10.18.1 |
| openSUSE | openSUSE Leap 15.2 | openldap2 – < 2.4.46-lp152.14.9.1 | 2.4.46-lp152.14.9.1 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP2 | openldap2 | 2.4.46-9.37.1 | SUSE-SU-2020:2712-1 |
| SLES 15 SP1 | openldap2 | 2.4.46-9.37.1 | SUSE-SU-2020:2712-1 |
| SLES 15 | openldap2 | 2.4.46-9.37.1 | SUSE-SU-2020:2712-2 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 | openldap2 | 2.4.46-9.37.1 | SUSE-SU-2020:2712-2 |
| SLE HPC 15 | openldap2 | 2.4.46-9.37.1 | SUSE-SU-2020:2712-2 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.2 | openldap2 | 2.4.46-lp152.14.9.1 | openSUSE-SU-2020:1539-1 |
| openSUSE Leap 15.1 | openldap2 | 2.4.46-lp151.10.18.1 | openSUSE-SU-2020:1534-1 |
Advisories 4
- SUSE-SU-2020:2712-1 Security update for openldap2 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1539-1 Security update for openldap2 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1534-1 Security update for openldap2 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2712-2 Security update for openldap2 SUSE / openSUSE Security Updates · May 2, 2025