Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

SUSE-SU-2026:0256-1 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceSUSE-SU-2026:0256-1

SUSE-SU-2026:0256-1

UNKNOWN

Security update for openldap2_5

Published Jan 22, 2026

Modified 1 months ago

Fix available

Details

This update for openldap2_5 fixes the following issues:

Security fixes:

CVE-2026-22185: Fixed possible crash in malicious DB (bsc#1256297)

Other fixes:

Update to version 2.5.20+11:
- ITS#10421 mdb_load: check for malicious input

Affected Packages

libldap-2_5-0

SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

2.5.20+11-150500.11.38.1

openldap2_5

SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Module for Server Applications 15 SP7openSUSE Leap 15.6

Fixed in:

2.5.20+11-150500.11.38.1

openldap2_5-client

SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

2.5.20+11-150500.11.38.1

openldap2_5-devel

SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

2.5.20+11-150500.11.38.1

openldap2_5-doc

SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

2.5.20+11-150500.11.38.1

openldap2_5-contrib

SUSE Linux Enterprise Module for Server Applications 15 SP7openSUSE Leap 15.6

Fixed in:

2.5.20+11-150500.11.38.1

openldap2_5-ppolicy-check-password

SUSE Linux Enterprise Module for Server Applications 15 SP7openSUSE Leap 15.6

Fixed in:

2.5.20+11-150500.11.38.1

References

REPORT

https://bugzilla.suse.com/1256297

WEB

https://www.suse.com/security/cve/CVE-2026-22185

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20260256-1/

Upstream

CVE-2026-22185

Ecosystems

SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP7 openSUSE Leap 15.6

Timeline

PublishedJan 22, 2026

ModifiedJan 22, 2026