critique
SUSE-SU-2022:2163-1
Security update for 389-ds
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for 389-ds fixes the following issues: - CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889). - CVE-2022-0918: Fixed denial of service issue via crafted messages (bsc#1197275). - CVE-2022-0996: Fixed mishandling of password expiry (bsc#1197345). - CVE-2021-4091: Fixed double free in psearch (bsc#1195324). - CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455).
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 15.1 | 389-ds, 389-ds-devel, 389-ds-snmp et 2 autres | 1.4.2.16~git68.efa843752-150100.7.34.1 |
Afficher les 5 entrées d'une source
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 15.1 | 389-ds | 1.4.2.16~git68.efa843752-150100.7.34.1 |
| SUSE Linux Enterprise 15.1 | 389-ds-devel | 1.4.2.16~git68.efa843752-150100.7.34.1 |
| SUSE Linux Enterprise 15.1 | 389-ds-snmp | 1.4.2.16~git68.efa843752-150100.7.34.1 |
| SUSE Linux Enterprise 15.1 | lib389 | 1.4.2.16~git68.efa843752-150100.7.34.1 |
| SUSE Linux Enterprise 15.1 | libsvrcore0 | 1.4.2.16~git68.efa843752-150100.7.34.1 |
Références
- https://bugzilla.suse.com/1188455
- https://bugzilla.suse.com/1195324
- https://bugzilla.suse.com/1197275
- https://bugzilla.suse.com/1197345
- https://bugzilla.suse.com/1199889
- https://bugzilla.suse.com/1200175
- https://lists.suse.com/pipermail/sle-security-updates/2022-June/011338.html
- https://www.suse.com/security/cve/CVE-2021-3652/
Les 14 références
- https://www.suse.com/security/cve/CVE-2021-4091/
- https://www.suse.com/security/cve/CVE-2022-0918/
- https://www.suse.com/security/cve/CVE-2022-0996/
- https://www.suse.com/security/cve/CVE-2022-1949/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2022/suse-su-20222163-1/