SUSE-SU-2022:1685-1

Details

Description of the patch:

This update for openldap2 fixes the following issues:

CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).

Affected Packages

compat-libldap-2_3-0

SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4

Fixed in:

2.3.37-42.1

References

ADVISORY

https://bugzilla.suse.com/1199240

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2022-May/011032.html

ADVISORY

https://www.suse.com/security/cve/CVE-2022-29155/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20221685-1/