Red Hat Security AdvisoryRHSA-2022:0730
cyrus-sasl security update
Released 2022-03-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v. 8.1) cyrus-sasl-sql-2.1.27-2.el8_1
- Red Hat Enterprise Linux BaseOS E4S (v. 8.1) cyrus-sasl-2.1.27-2.el8_1, cyrus-sasl-devel-2.1.27-2.el8_1, cyrus-sasl-gs2-2.1.27-2.el8_1 +7
Fixes 1 record
Priority MEDIUM 45
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04123 · Published 2022-02-23 · Partial fix CWE-89
