critical
SUSE-SU-2022:1832-1
Security update for openldap2
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for openldap2 fixes the following issues: Security: - CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240). Bugfixes: - allow specification of max/min TLS version with TLS1.3 (bsc#1191157) - libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol resolution failures. openldap2 and libldap now are locked to their related release versions. (bsc#1197004) - restore CLDAP functionality in CLI tools (jsc#PM-3288)
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15 | libldap-2_4-2, libldap-2_4-2-32bit, libldap-data and 8 more | 2.4.46-150000.9.71.1 and 1 more |
| SUSE Linux Enterprise 15.1 | libldap-2_4-2, libldap-2_4-2-32bit, libldap-data and 8 more | 2.4.46-150000.9.71.1 and 1 more |
Show all 22 entries from 2 sources
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15 | libldap-2_4-2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | libldap-2_4-2-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | libldap-data | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-back-meta | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-back-perl | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-client | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-devel | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-devel-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-devel-static | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15 | openldap2-ppolicy-check-password | 1.2-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | libldap-2_4-2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | libldap-2_4-2-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | libldap-data | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2 | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-back-meta | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-back-perl | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-client | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-devel | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-devel-32bit | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-devel-static | 2.4.46-150000.9.71.1 |
| SUSE Linux Enterprise 15.1 | openldap2-ppolicy-check-password | 1.2-150000.9.71.1 |
References
- https://bugzilla.suse.com/1191157
- https://bugzilla.suse.com/1197004
- https://bugzilla.suse.com/1199240
- https://lists.suse.com/pipermail/sle-security-updates/2022-May/011147.html
- https://www.suse.com/security/cve/CVE-2022-29155/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2022/suse-su-20221832-1/