kritisch
SUSE-SU-2022:1832-1
Security update for openldap2
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for openldap2 fixes the following issues: Security: - CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240). Bugfixes: - allow specification of max/min TLS version with TLS1.3 (bsc#1191157) - libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol resolution failures. openldap2 and libldap now are locked to their related release versions. (bsc#1197004) - restore CLDAP functionality in CLI tools (jsc#PM-3288)
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 15 | libldap-2_4-2, libldap-2_4-2-32bit, libldap-data und 8 weitere | 2.4.46-150000.9.71.1 und 1 weitere |
| SUSE Linux Enterprise 15.1 | libldap-2_4-2, libldap-2_4-2-32bit, libldap-data und 8 weitere | 2.4.46-150000.9.71.1 und 1 weitere |
Alle 22 Einträge aus 2 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 15 | libldap-2_4-2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | libldap-2_4-2-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | libldap-data | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-back-meta | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-back-perl | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-client | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-devel | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-devel-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-devel-static | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-ppolicy-check-password | 1.2-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | libldap-2_4-2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | libldap-2_4-2-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | libldap-data | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-back-meta | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-back-perl | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-client | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-devel | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-devel-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-devel-static | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-ppolicy-check-password | 1.2-150000.9.71.1 |
Referenzen
- https://bugzilla.suse.com/1191157
- https://bugzilla.suse.com/1197004
- https://bugzilla.suse.com/1199240
- https://lists.suse.com/pipermail/sle-security-updates/2022-May/011147.html
- https://www.suse.com/security/cve/CVE-2022-29155/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2022/suse-su-20221832-1/