Security update for ldb SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:1576-1 Final 1 1 2022-05-09T11:44:54Z current 2022-05-09T11:44:54Z 2022-05-09T11:44:54Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ldb This update for ldb fixes the following issues: - Update to version 2.4.2 - CVE-2021-3670: Fixed an issue where the LDAP server MaxQueryDuration value would not be honoured (bsc#1198397). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP3-BYOS-Azure-2022-1576,Image SLES15-SP3-BYOS-EC2-HVM-2022-1576,Image SLES15-SP3-BYOS-GCE-2022-1576,Image SLES15-SP3-CHOST-BYOS-Aliyun-2022-1576,Image SLES15-SP3-CHOST-BYOS-Azure-2022-1576,Image SLES15-SP3-CHOST-BYOS-EC2-2022-1576,Image SLES15-SP3-CHOST-BYOS-GCE-2022-1576,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2022-1576,Image SLES15-SP3-GCE-2022-1576,Image SLES15-SP3-HPC-BYOS-Azure-2022-1576,Image SLES15-SP3-HPC-BYOS-EC2-HVM-2022-1576,Image SLES15-SP3-HPC-BYOS-GCE-2022-1576,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2022-1576,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2022-1576,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2022-1576,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2022-1576,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2022-1576,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2022-1576,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2022-1576,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2022-1576,Image SLES15-SP3-SAP-BYOS-Azure-2022-1576,Image SLES15-SP3-SAP-BYOS-EC2-HVM-2022-1576,Image SLES15-SP3-SAP-BYOS-GCE-2022-1576,Image SLES15-SP3-SAPCAL-Azure-2022-1576,Image SLES15-SP3-SAPCAL-EC2-HVM-2022-1576,Image SLES15-SP3-SAPCAL-GCE-2022-1576,SUSE-2022-1576,SUSE-SLE-Module-Basesystem-15-SP3-2022-1576,SUSE-SUSE-MicroOS-5.1-2022-1576,SUSE-SUSE-MicroOS-5.2-2022-1576,SUSE-Storage-7.1-2022-1576,openSUSE-SLE-15.3-2022-1576 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20221576-1/ Link for SUSE-SU-2022:1576-1 https://lists.suse.com/pipermail/sle-security-updates/2022-May/010970.html E-Mail link for SUSE-SU-2022:1576-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1198397 SUSE Bug 1198397 https://www.suse.com/security/cve/CVE-2021-3670/ SUSE CVE CVE-2021-3670 page Image SLES15-SP3-BYOS-Azure Image SLES15-SP3-BYOS-EC2-HVM Image SLES15-SP3-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-GCE Image SLES15-SP3-HPC-BYOS-Azure Image SLES15-SP3-HPC-BYOS-EC2-HVM Image SLES15-SP3-HPC-BYOS-GCE Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15 SP3 openSUSE Leap 15.3 libldb2-2.4.2-150300.3.15.1 libldb2-32bit-2.4.2-150300.3.15.1 ldb-tools-2.4.2-150300.3.15.1 libldb-devel-2.4.2-150300.3.15.1 libldb2-64bit-2.4.2-150300.3.15.1 python3-ldb-2.4.2-150300.3.15.1 python3-ldb-32bit-2.4.2-150300.3.15.1 python3-ldb-64bit-2.4.2-150300.3.15.1 python3-ldb-devel-2.4.2-150300.3.15.1 libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-BYOS-Azure libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-BYOS-EC2-HVM libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-BYOS-GCE libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-GCE libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-HPC-BYOS-Azure libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-HPC-BYOS-EC2-HVM libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-HPC-BYOS-GCE libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-SAPCAL-Azure libldb2-32bit-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-SAPCAL-Azure libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libldb2-32bit-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM libldb2-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-SAPCAL-GCE libldb2-32bit-2.4.2-150300.3.15.1 as a component of Image SLES15-SP3-SAPCAL-GCE libldb2-2.4.2-150300.3.15.1 as a component of SUSE Enterprise Storage 7.1 python3-ldb-2.4.2-150300.3.15.1 as a component of SUSE Enterprise Storage 7.1 libldb2-2.4.2-150300.3.15.1 as a component of SUSE Linux Enterprise Micro 5.1 libldb2-2.4.2-150300.3.15.1 as a component of SUSE Linux Enterprise Micro 5.2 ldb-tools-2.4.2-150300.3.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libldb-devel-2.4.2-150300.3.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libldb2-2.4.2-150300.3.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libldb2-32bit-2.4.2-150300.3.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 python3-ldb-2.4.2-150300.3.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 python3-ldb-devel-2.4.2-150300.3.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 ldb-tools-2.4.2-150300.3.15.1 as a component of openSUSE Leap 15.3 libldb-devel-2.4.2-150300.3.15.1 as a component of openSUSE Leap 15.3 libldb2-2.4.2-150300.3.15.1 as a component of openSUSE Leap 15.3 libldb2-32bit-2.4.2-150300.3.15.1 as a component of openSUSE Leap 15.3 python3-ldb-2.4.2-150300.3.15.1 as a component of openSUSE Leap 15.3 python3-ldb-32bit-2.4.2-150300.3.15.1 as a component of openSUSE Leap 15.3 python3-ldb-devel-2.4.2-150300.3.15.1 as a component of openSUSE Leap 15.3 MaxQueryDuration not honoured in Samba AD DC LDAP CVE-2021-3670 Image SLES15-SP3-BYOS-Azure:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-BYOS-EC2-HVM:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-BYOS-GCE:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-CHOST-BYOS-Azure:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-CHOST-BYOS-EC2:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-CHOST-BYOS-GCE:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-GCE:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-HPC-BYOS-Azure:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-HPC-BYOS-GCE:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-SAP-BYOS-Azure:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-SAP-BYOS-GCE:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-SAPCAL-Azure:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-SAPCAL-Azure:libldb2-32bit-2.4.2-150300.3.15.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-SAPCAL-EC2-HVM:libldb2-32bit-2.4.2-150300.3.15.1 Image SLES15-SP3-SAPCAL-GCE:libldb2-2.4.2-150300.3.15.1 Image SLES15-SP3-SAPCAL-GCE:libldb2-32bit-2.4.2-150300.3.15.1 SUSE Enterprise Storage 7.1:libldb2-2.4.2-150300.3.15.1 SUSE Enterprise Storage 7.1:python3-ldb-2.4.2-150300.3.15.1 SUSE Linux Enterprise Micro 5.1:libldb2-2.4.2-150300.3.15.1 SUSE Linux Enterprise Micro 5.2:libldb2-2.4.2-150300.3.15.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:ldb-tools-2.4.2-150300.3.15.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libldb-devel-2.4.2-150300.3.15.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libldb2-2.4.2-150300.3.15.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libldb2-32bit-2.4.2-150300.3.15.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:python3-ldb-2.4.2-150300.3.15.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:python3-ldb-devel-2.4.2-150300.3.15.1 openSUSE Leap 15.3:ldb-tools-2.4.2-150300.3.15.1 openSUSE Leap 15.3:libldb-devel-2.4.2-150300.3.15.1 openSUSE Leap 15.3:libldb2-2.4.2-150300.3.15.1 openSUSE Leap 15.3:libldb2-32bit-2.4.2-150300.3.15.1 openSUSE Leap 15.3:python3-ldb-2.4.2-150300.3.15.1 openSUSE Leap 15.3:python3-ldb-32bit-2.4.2-150300.3.15.1 openSUSE Leap 15.3:python3-ldb-devel-2.4.2-150300.3.15.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221576-1/ https://www.suse.com/security/cve/CVE-2021-3670.html CVE-2021-3670 https://bugzilla.suse.com/1198397 SUSE Bug 1198397