SUSE-SU-2022:1685-1

Details

This update for openldap2 fixes the following issues:

CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).

Affected Packages

compat-libldap-2_3-0

SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server for SAP Applications 12 SP3SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.3.37-42.1

openldap2

SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server for SAP Applications 12 SP3SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.4.41-42.1

References

REPORT

https://bugzilla.suse.com/1199240

WEB

https://www.suse.com/security/cve/CVE-2022-29155

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20221685-1/