SUSE-CU-2020:361-1: Security update of suse/sles12sp5

[sle-security-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sles12sp5
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2020:361-1
Container Tags        : suse/sles12sp5:6.5.21 , suse/sles12sp5:latest
Container Release     : 6.5.21
Severity              : important
Type                  : security
References            : 1084671 1154256 1157315 1161262 1161436 1162698 1164538 1165633
                        1167622 1170715 1171145 1171883 1172698 1172704 CVE-2019-20386
                        CVE-2020-8023 
-----------------------------------------------------------------

The container suse/sles12sp5 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2020:1828-1
Released:    Thu Jul  2 13:07:28 2020
Summary:     Security update for systemd
Type:        security
Severity:    moderate
References:  1084671,1154256,1157315,1161262,1161436,1162698,1164538,1165633,1167622,1171145,CVE-2019-20386
This update for systemd fixes the following issues:

- CVE-2019-20386: Fixed a memory leak when executing the udevadm trigger command (bsc#1161436).
- Renamed the persistent link for ATA devices (bsc#1164538)
- shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)
- tmpfiles: removed unnecessary assert (bsc#1171145)
- pid1: by default make user units inherit their umask from the user manager (bsc#1162698)
- manager: fixed job mode when signalled to shutdown etc (bsc#1161262)
- coredump: fixed bug that loses core dump files when core dumps are compressed and disk space is low. (bsc#1167622)
- udev: inform systemd how many workers we can potentially spawn (#4036) (bsc#1165633)
- libblkid: open device in nonblock mode. (bsc#1084671)
- udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256)

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2020:1857-1
Released:    Mon Jul  6 17:07:31 2020
Summary:     Security update for permissions
Type:        security
Severity:    moderate
References:  1171883
This update for permissions fixes the following issues:

- Removed conflicting entries which might expose pcp to security issues (bsc#1171883) 	  

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2020:1859-1
Released:    Mon Jul  6 17:08:28 2020
Summary:     Security update for openldap2
Type:        security
Severity:    important
References:  1170715,1172698,1172704,CVE-2020-8023
This update for openldap2 fixes the following issues:

- CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAP_CONFIG_BACKEND='ldap' was used (bsc#1172698).	  
- Changed DB_CONFIG to root:ldap permissions (bsc#1172704).	 
- Fixed an issue where slapd becomes unresponsive after many failed login/bind attempts(bsc#1170715).