Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceSUSE-SU-2022:14894-1

SUSE-SU-2022:14894-1

UNKNOWN

Security update for cyrus-sasl

Published Feb 23, 2022

Modified 4 years ago

Fix available

Details

This update for cyrus-sasl fixes the following issues:

CVE-2022-24407: Fixed SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036).

Affected Packages(34 packages)

cyrus-sasl

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.1.22-182.26.7.1

cyrus-sasl-crammd5

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.1.22-182.26.7.1

cyrus-sasl-digestmd5

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.1.22-182.26.7.1

cyrus-sasl-gssapi

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.1.22-182.26.7.1

cyrus-sasl-otp

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.1.22-182.26.7.1

cyrus-sasl-plain

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.1.22-182.26.7.1

cyrus-sasl-saslauthd

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.1.22-182.26.7.1

cyrus-sasl-sqlauxprop

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.1.22-182.26.7.1

cyrus-sasl-32bit

SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.1.22-182.26.7.1

cyrus-sasl-crammd5-32bit

SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.1.22-182.26.7.1

References

https://bugzilla.suse.com/1196036

https://www.suse.com/security/cve/CVE-2022-24407

https://www.suse.com/support/update/announcement/2022/suse-su-202214894-1/

Upstream

Related

Ecosystems

SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 11-SECURITY

Timeline

PublishedFeb 23, 2022

ModifiedFeb 23, 2022

SUSE-SU-2022:14894-1 | Mondoo Vulnerability Intelligence