critique
SUSE-SU-2022:1832-1
Security update for openldap2
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for openldap2 fixes the following issues: Security: - CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240). Bugfixes: - allow specification of max/min TLS version with TLS1.3 (bsc#1191157) - libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol resolution failures. openldap2 and libldap now are locked to their related release versions. (bsc#1197004) - restore CLDAP functionality in CLI tools (jsc#PM-3288)
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 15 | libldap-2_4-2, libldap-2_4-2-32bit, libldap-data et 8 autres | 2.4.46-150000.9.71.1 et 1 autres |
| SUSE Linux Enterprise 15.1 | libldap-2_4-2, libldap-2_4-2-32bit, libldap-data et 8 autres | 2.4.46-150000.9.71.1 et 1 autres |
Afficher les 22 entrées de 2 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 15 | libldap-2_4-2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | libldap-2_4-2-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | libldap-data | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-back-meta | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-back-perl | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-client | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-devel | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-devel-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-devel-static | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-ppolicy-check-password | 1.2-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | libldap-2_4-2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | libldap-2_4-2-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | libldap-data | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-back-meta | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-back-perl | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-client | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-devel | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-devel-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-devel-static | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-ppolicy-check-password | 1.2-150000.9.71.1 |
Références
- https://bugzilla.suse.com/1191157
- https://bugzilla.suse.com/1197004
- https://bugzilla.suse.com/1199240
- https://lists.suse.com/pipermail/sle-security-updates/2022-May/011147.html
- https://www.suse.com/security/cve/CVE-2022-29155/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2022/suse-su-20221832-1/