Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

SUSE: 2022:3029-1 Moderate Advisory for 389-ds Application Crash

suse
Calendar Grey September 5, 2022
Dist Suse Esm H88
Moderate patch released for 389-ds on SUSE dealing with a software failure triggered by an invalid cookie problem.
An update that solves one vulnerability and has one errata is now available

Summary

This update for 389-ds fixes the following issues: - CVE-2022-2850: Fixed an application crash when running a sync_repl client that could be triggered via a malformed cookie (bsc#1202470). Non-security fixes: - Update to version 1.4.4.19~git46.c900a28c8: * CI - makes replication/acceptance_test.py::test_modify_entry more robust * UI - LDAP Editor is not updated when we switch instances - Improvements to openldap import with password policy present (bsc#1199908) - Update to version 1.4.4.19~git43.8ba2ea21f: * fix covscan * BUG - pid file handling * Memory leak in slapi_ldap_get_lderrno * Need a compatibility option about sub suffix handling * Release tarballs don't contain cockpit webapp * Replication broken after password change * Harden ReplicationManager.wait_for_replication

Topics%20covered

Topics Covered

security advisory moderate application crash SUSE Linux patch 389-ds SUSE update solution

References

#1199908 #1202470

Cross- CVE-2022-2850

CVSS scores:

CVE-2022-2850 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products:

SUSE Linux Enterprise High Performance Computing 15-SP3

SUSE Linux Enterprise Module for Server Applications 15-SP3

SUSE Linux Enterprise Server 15-SP3

SUSE Linux Enterprise Server for SAP Applications 15-SP3

SUSE Linux Enterprise Storage 7.1

SUSE Manager Proxy 4.2

SUSE Manager Retail Branch Server 4.2

SUSE Manager Server 4.2

openSUSE Leap 15.3

https://www.suse.com/security/cve/CVE-2022-2850.html

https://bugzilla.suse.com/1199908

https://bugzilla.suse.com/1202470

Announcement ID: SUSE-SU-2022:3029-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate application crash SUSE Linux patch 389-ds SUSE update solution

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here