Skip to content
OpenAdvisories
High ELSA-2022-0666 1 CVE

Important: cyrus-sasl security update (Oracle Linux 7)

Published Feb 24, 2022 · Updated Feb 24, 2022

Ecosystem: Oracle Linux

Summary

[2.1.26-24.0.1]
- Check against gssapi null pointer [Orabug: 33270138]

[2.1.26-24]
- Fix for CVE-2022-24407
- Resolves: rhbz#2055842

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 7 cyrus-sasl 0:2.1.26-24.0.1.el7_9
Oracle Linux · 7 cyrus-sasl-devel 0:2.1.26-24.0.1.el7_9
Oracle Linux · 7 cyrus-sasl-gs2 0:2.1.26-24.0.1.el7_9
Oracle Linux · 7 cyrus-sasl-gssapi 0:2.1.26-24.0.1.el7_9
Oracle Linux · 7 cyrus-sasl-ldap 0:2.1.26-24.0.1.el7_9
Oracle Linux · 7 cyrus-sasl-lib 0:2.1.26-24.0.1.el7_9
Oracle Linux · 7 cyrus-sasl-md5 0:2.1.26-24.0.1.el7_9
Oracle Linux · 7 cyrus-sasl-ntlm 0:2.1.26-24.0.1.el7_9
Oracle Linux · 7 cyrus-sasl-plain 0:2.1.26-24.0.1.el7_9
Oracle Linux · 7 cyrus-sasl-scram 0:2.1.26-24.0.1.el7_9
Oracle Linux · 7 cyrus-sasl-sql 0:2.1.26-24.0.1.el7_9

Vulnerabilities 1