==========================================================================
Ubuntu Security Notice USN-4622-1
November 09, 2020
openldap vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 20.10
– Ubuntu 20.04 LTS
– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS
Summary:
OpenLDAP could be made to crash or run programs if it received
specially crafted network traffic.
Software Description:
– openldap: Lightweight Directory Access Protocol
Details:
It was discovered that OpenLDAP incorrectly handled certain network
packets. A remote attacker could use this issue to cause OpenLDAP to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.10:
slapd 2.4.53+dfsg-1ubuntu1.1
Ubuntu 20.04 LTS:
slapd 2.4.49+dfsg-2ubuntu1.4
Ubuntu 18.04 LTS:
slapd 2.4.45+dfsg-1ubuntu1.7
Ubuntu 16.04 LTS:
slapd 2.4.42+dfsg-2ubuntu3.10
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4622-1
CVE-2020-25692
Package Information:
https://launchpad.net/ubuntu/+source/openldap/2.4.53+dfsg-1ubuntu1.1
https://launchpad.net/ubuntu/+source/openldap/2.4.49+dfsg-2ubuntu1.4
https://launchpad.net/ubuntu/+source/openldap/2.4.45+dfsg-1ubuntu1.7
https://launchpad.net/ubuntu/+source/openldap/2.4.42+dfsg-2ubuntu3.10
—–BEGIN PGP SIGNATURE—–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=tD2j
—–END PGP SIGNATURE—–
—
