tocsin

Debian/openldap: critical 9.8

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur durin

Action: Upgrade openldap to 2.5.12+dfsg-1 or later.

Affected

introducedfixedlast affected
02.5.12+dfsg-1-

Fixed versions

2.5.12+dfsg-1

Sources

published · modified · JSON