Уведомление безопасности SUSE-SU-2015:1077-1

Средняя (5.0)

(AV:N/AC:L/Au:N/C:N/I:N/A:P)

SUSE

libldap-2_4-2 (any) libldap-2_4-2-32bit (any) libldap-2_4-2-debuginfo (any) libldap-2_4-2-debuginfo-32bit (any) openldap2 (any) openldap2-back-meta (any) openldap2-back-meta-debuginfo (any) openldap2-back-perl (any) openldap2-back-perl-debuginfo (any) openldap2-client (any) openldap2-client-debuginfo (any) openldap2-client-debugsource (any) openldap2-debuginfo (any) openldap2-debugsource (any) openldap2-devel (any) openldap2-devel-static (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Module for Legacy Software 12, 12, SUSE Linux Enterprise Desktop 12, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Software Development Kit 12

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Module for Legacy Software 12:
s390x, x86_64:
compat-libldap-2_3-0-debuginfo - 2.3.37-16.1
compat-libldap-2_3-0 - 2.3.37-16.1
SUSE Linux Enterprise Module for Legacy Software 12:
ppc64le:
compat-libldap-2_3-0-debuginfo - 2.3.37-15.1
compat-libldap-2_3-0 - 2.3.37-15.1
12:
x86_64:
compat-libldap-2_3-0-debuginfo - 2.3.37-16.1
compat-libldap-2_3-0 - 2.3.37-16.1
SUSE Linux Enterprise Desktop 12:
x86_64:
libldap-2_4-2-32bit - 2.4.39-16.1
openldap2-client - 2.4.39-16.1
libldap-2_4-2 - 2.4.39-16.1
libldap-2_4-2-debuginfo-32bit - 2.4.39-16.1
libldap-2_4-2-debuginfo - 2.4.39-16.1
openldap2-client-debugsource - 2.4.39-16.1
openldap2-client-debuginfo - 2.4.39-16.1
SUSE Linux Enterprise Server 12:
s390x, x86_64:
openldap2-debuginfo - 2.4.39-16.1
libldap-2_4-2-32bit - 2.4.39-16.1
openldap2-client - 2.4.39-16.1
libldap-2_4-2 - 2.4.39-16.1
openldap2-back-meta - 2.4.39-16.1
libldap-2_4-2-debuginfo-32bit - 2.4.39-16.1
libldap-2_4-2-debuginfo - 2.4.39-16.1
openldap2 - 2.4.39-16.1
openldap2-client-debugsource - 2.4.39-16.1
openldap2-back-meta-debuginfo - 2.4.39-16.1
openldap2-debugsource - 2.4.39-16.1
openldap2-client-debuginfo - 2.4.39-16.1
SUSE Linux Enterprise Server 12:
ppc64le:
openldap2-client-debuginfo - 2.4.39-15.1
openldap2-back-meta - 2.4.39-15.1
openldap2-client-debugsource - 2.4.39-15.1
libldap-2_4-2 - 2.4.39-15.1
openldap2-debuginfo - 2.4.39-15.1
openldap2-debugsource - 2.4.39-15.1
openldap2-back-meta-debuginfo - 2.4.39-15.1
openldap2-client - 2.4.39-15.1
openldap2 - 2.4.39-15.1
libldap-2_4-2-debuginfo - 2.4.39-15.1
SUSE Linux Enterprise Software Development Kit 12:
s390x, x86_64:
openldap2-debuginfo - 2.4.39-16.1
openldap2-back-perl-debuginfo - 2.4.39-16.1
openldap2-devel-static - 2.4.39-16.1
openldap2-client-debugsource - 2.4.39-16.1
openldap2-devel - 2.4.39-16.1
openldap2-back-perl - 2.4.39-16.1
openldap2-debugsource - 2.4.39-16.1
openldap2-client-debuginfo - 2.4.39-16.1
SUSE Linux Enterprise Software Development Kit 12:
ppc64le:
openldap2-client-debuginfo - 2.4.39-15.1
openldap2-devel - 2.4.39-15.1
openldap2-client-debugsource - 2.4.39-15.1
openldap2-back-perl-debuginfo - 2.4.39-15.1
openldap2-debugsource - 2.4.39-15.1
openldap2-back-perl - 2.4.39-15.1
openldap2-devel-static - 2.4.39-15.1
openldap2-debuginfo - 2.4.39-15.1

http://lists.suse.com/pipermail/sle-security-updates/2015-June/001443.html
https://bugzilla.suse.com/905959
https://bugzilla.suse.com/916897
https://bugzilla.suse.com/916914

Источник: CVE
Наименование: CVE-2015-1545
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545

Источник: CVE
Наименование: CVE-2015-1546
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546