kritik
SUSE-SU-2022:1832-1
Security update for openldap2
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for openldap2 fixes the following issues: Security: - CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240). Bugfixes: - allow specification of max/min TLS version with TLS1.3 (bsc#1191157) - libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol resolution failures. openldap2 and libldap now are locked to their related release versions. (bsc#1197004) - restore CLDAP functionality in CLI tools (jsc#PM-3288)
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 15 | libldap-2_4-2, libldap-2_4-2-32bit, libldap-data ve 8 tane daha | 2.4.46-150000.9.71.1 ve 1 tane daha |
| SUSE Linux Enterprise 15.1 | libldap-2_4-2, libldap-2_4-2-32bit, libldap-data ve 8 tane daha | 2.4.46-150000.9.71.1 ve 1 tane daha |
2 kaynaktaki 22 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 15 | libldap-2_4-2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | libldap-2_4-2-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | libldap-data | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-back-meta | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-back-perl | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-client | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-devel | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-devel-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-devel-static | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-ppolicy-check-password | 1.2-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | libldap-2_4-2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | libldap-2_4-2-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | libldap-data | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-back-meta | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-back-perl | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-client | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-devel | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-devel-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-devel-static | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-ppolicy-check-password | 1.2-150000.9.71.1 |
Referanslar
- https://bugzilla.suse.com/1191157
- https://bugzilla.suse.com/1197004
- https://bugzilla.suse.com/1199240
- https://lists.suse.com/pipermail/sle-security-updates/2022-May/011147.html
- https://www.suse.com/security/cve/CVE-2022-29155/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2022/suse-su-20221832-1/