tocsin

Alpine/openldap: critical 9.8

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur durin

Action: Upgrade openldap to 2.6.2-r0 or later.

Affected

introducedfixedlast affected
2.02.6.2-r0-

Fixed versions

2.6.2-r0

Sources

published · modified · JSON