Red Hat Security AdvisoryRHSA-2022:0731
cyrus-sasl security update
Released 2022-03-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 8.2) cyrus-sasl-sql-2.1.27-2.el8_2
- Red Hat Enterprise Linux BaseOS EUS (v. 8.2) cyrus-sasl-2.1.27-2.el8_2, cyrus-sasl-devel-2.1.27-2.el8_2, cyrus-sasl-gs2-2.1.27-2.el8_2 +7
Fixes 1 record
Priority MEDIUM 45
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04123 · Published 2022-02-23 · Partial fix CWE-89
