Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:1685-1

Опубликовано: 16 мая 2022
Источник: suse-cvrf

Описание

Security update for openldap2

This update for openldap2 fixes the following issues:

  • CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).

Список пакетов

SUSE Linux Enterprise Module for Legacy 12
compat-libldap-2_3-0-2.3.37-42.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
compat-libldap-2_3-0-2.3.37-42.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
compat-libldap-2_3-0-2.3.37-42.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
compat-libldap-2_3-0-2.3.37-42.1

Ссылки

Описание

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.

Затронутые продукты
SUSE Linux Enterprise Module for Legacy 12:compat-libldap-2_3-0-2.3.37-42.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3:compat-libldap-2_3-0-2.3.37-42.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4:compat-libldap-2_3-0-2.3.37-42.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:compat-libldap-2_3-0-2.3.37-42.1
Ссылки