Summary
[2.1.27-6]
- Fix for CVE-2022-24407
- Resolves: rhbz#2055846
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | cyrus-sasl | 0:2.1.27-6.el8_5 |
| Oracle Linux · 8 | cyrus-sasl-devel | 0:2.1.27-6.el8_5 |
| Oracle Linux · 8 | cyrus-sasl-gs2 | 0:2.1.27-6.el8_5 |
| Oracle Linux · 8 | cyrus-sasl-gssapi | 0:2.1.27-6.el8_5 |
| Oracle Linux · 8 | cyrus-sasl-ldap | 0:2.1.27-6.el8_5 |
| Oracle Linux · 8 | cyrus-sasl-lib | 0:2.1.27-6.el8_5 |
| Oracle Linux · 8 | cyrus-sasl-md5 | 0:2.1.27-6.el8_5 |
| Oracle Linux · 8 | cyrus-sasl-ntlm | 0:2.1.27-6.el8_5 |
| Oracle Linux · 8 | cyrus-sasl-plain | 0:2.1.27-6.el8_5 |
| Oracle Linux · 8 | cyrus-sasl-scram | 0:2.1.27-6.el8_5 |
| Oracle Linux · 8 | cyrus-sasl-sql | 0:2.1.27-6.el8_5 |
Vulnerabilities 1
-
Unscored —
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDAT…