CVE-2026-6900

Ein Hersteller-Fix ist verfügbar.

• BehobenAPROLabb_psirt

  The problem is corrected in the following product versions: - APROL >= R 4.4-01P5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

• MitigationAPROLabb_psirt

  Refer to section “General security recommendations” for further advise on how to keep your system secure.

• WorkaroundAPROLabb_psirt

  Enable TLS Certificate Verification System-Wide Add the following configuration directive to the file /etc/openldap/ldap.conf: TLS_REQCERT demand This tells the LDAP client to require and verify the server's certificate. Configure Certificate Verification for Each User Account Each Linux user account (engineering, runtime, and operator accounts) needs its own configuration file that points to where its issuer certificates are stored. Create a .ldaprc file in the home directory of each account and add the appropriate certificate directory path. For Engineering Accounts: Create /home/<username>/.ldaprc and add: TLS_CACERTDIR /home/<username>/ENGIN/cnf/GLOBAL_ENGINEERING/LDAP/issuers/ For Runtime and Operator Accounts: Create /home/<username>/.ldaprc and add: TLS_CACERTDIR /home/<username>/RUNTIME/cnf/GLOBAL/LDAP/issuers/ Replace <username> with the actual Linux user account name. Prepare the Certificate Directories For each issuer certificate directory you created above, run this command to enable certificate verification: openssl rehash <issuer certificate directory> This command indexes the certificates so the system can find them quickly during verification. Deploy Trusted Certificates When you configure an external LDAP server, manually copy the server's trusted issuer certificate to the appropriate directories you created in “Configure Certificate Verification for Each User Account”.