Описание
ELSA-2022-9239: cyrus-sasl security update (IMPORTANT)
[2.1.23-15.0.1.2]
- Escape password for SQL insert/update commands [CVE-2022-24407][Orabug: 33936121]
Обновленные пакеты
Oracle Linux 6
Oracle Linux x86_64
cyrus-sasl
2.1.23-15.0.1.el6_6.2
cyrus-sasl-devel
2.1.23-15.0.1.el6_6.2
cyrus-sasl-gssapi
2.1.23-15.0.1.el6_6.2
cyrus-sasl-ldap
2.1.23-15.0.1.el6_6.2
cyrus-sasl-lib
2.1.23-15.0.1.el6_6.2
cyrus-sasl-md5
2.1.23-15.0.1.el6_6.2
cyrus-sasl-ntlm
2.1.23-15.0.1.el6_6.2
cyrus-sasl-plain
2.1.23-15.0.1.el6_6.2
cyrus-sasl-sql
2.1.23-15.0.1.el6_6.2
Oracle Linux i686
cyrus-sasl
2.1.23-15.0.1.el6_6.2
cyrus-sasl-devel
2.1.23-15.0.1.el6_6.2
cyrus-sasl-gssapi
2.1.23-15.0.1.el6_6.2
cyrus-sasl-ldap
2.1.23-15.0.1.el6_6.2
cyrus-sasl-lib
2.1.23-15.0.1.el6_6.2
cyrus-sasl-md5
2.1.23-15.0.1.el6_6.2
cyrus-sasl-ntlm
2.1.23-15.0.1.el6_6.2
cyrus-sasl-plain
2.1.23-15.0.1.el6_6.2
cyrus-sasl-sql
2.1.23-15.0.1.el6_6.2
Связанные CVE
Связанные уязвимости
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does ...