Описание
ELSA-2022-0658: cyrus-sasl security update (IMPORTANT)
[2.1.27-6]
- Fix for CVE-2022-24407
- Resolves: rhbz#2055846
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
cyrus-sasl
2.1.27-6.el8_5
cyrus-sasl-devel
2.1.27-6.el8_5
cyrus-sasl-gs2
2.1.27-6.el8_5
cyrus-sasl-gssapi
2.1.27-6.el8_5
cyrus-sasl-ldap
2.1.27-6.el8_5
cyrus-sasl-lib
2.1.27-6.el8_5
cyrus-sasl-md5
2.1.27-6.el8_5
cyrus-sasl-ntlm
2.1.27-6.el8_5
cyrus-sasl-plain
2.1.27-6.el8_5
cyrus-sasl-scram
2.1.27-6.el8_5
cyrus-sasl-sql
2.1.27-6.el8_5
Oracle Linux x86_64
cyrus-sasl
2.1.27-6.el8_5
cyrus-sasl-devel
2.1.27-6.el8_5
cyrus-sasl-gs2
2.1.27-6.el8_5
cyrus-sasl-gssapi
2.1.27-6.el8_5
cyrus-sasl-ldap
2.1.27-6.el8_5
cyrus-sasl-lib
2.1.27-6.el8_5
cyrus-sasl-md5
2.1.27-6.el8_5
cyrus-sasl-ntlm
2.1.27-6.el8_5
cyrus-sasl-plain
2.1.27-6.el8_5
cyrus-sasl-scram
2.1.27-6.el8_5
cyrus-sasl-sql
2.1.27-6.el8_5
Связанные CVE
Связанные уязвимости
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does ...