Debian/openldap: critical 9.8
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur durin
Action: Upgrade openldap to 2.5.12+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.12+dfsg-1 | - |
Fixed versions
| 2.5.12+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2022-29155#Debian:13/openldap
- https://security-tracker.debian.org/tracker/CVE-2022-29155
published · modified · JSON