< back to search

gpp_maybe Security update for cyrus-sasl
SUSE-SLE-SERVER-12-SP5-2022-693

This update for cyrus-sasl fixes the following issues: - CVE-2022-24407: Fixed SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036).

  • Release Date
    Mar 3 2022
  • References
    Bugzilla: 1196036
    CVEs: CVE-2022-24407
  • Type
    security
  • Severity
    important

cloud_download Downloads

SUSE Linux Enterprise Server 12.5 aarch64
  • Packages
    cyrus-sasl
    Implementation of Cyrus SASL API
    2.1.26-14.5.1 lock rpm lock src
    cyrus-sasl-crammd5
    Plugin for the CRAMMD5 SASL mechanism
    2.1.26-14.5.1 lock rpm
    cyrus-sasl-digestmd5
    Plugin for the DIGESTMD5 SASL mechanism
    2.1.26-14.5.1 lock rpm
    cyrus-sasl-gssapi
    Plugin for the GSSAPI SASL mechanism
    2.1.26-14.5.1 lock rpm
    cyrus-sasl-otp
    Plugin for the OTP SASL mechanism
    2.1.26-14.5.1 lock rpm
    cyrus-sasl-plain
    Plugin for the PLAIN SASL mechanism
    2.1.26-14.5.1 lock rpm
    cyrus-sasl-saslauthd
    The SASL Authentication Server
    2.1.26-14.5.1 lock rpm lock src
    cyrus-sasl-sqlauxprop
    SQL auxprop plugin for cyrus-sasl
    2.1.26-14.5.1 lock rpm
    libsasl2-3
    Simple Authentication and Security Layer (SASL) library
    2.1.26-14.5.1 lock rpm
    2.1.26-14.5.1 lock rpm
SUSE Linux Enterprise Server 12.5 x86_64
SUSE Linux Enterprise Server 12.5 s390x
SUSE Linux Enterprise Server 12.5 ppc64le