Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Fedora 34: 2021-c2d8628d33 Moderate: libldb Samba Heap Security Fix

fedora
Calendar Grey March 26, 2021
Dist Fedora Esm H88
Fedora 34 has rolled out updates that tackle Samba vulnerabilities while also improving the features of libldb. These enhancements aim to bolster system security and optimize performance.
Update to Samba 4.14.2 Security fixes for CVE-2020-27840, CVE-2020-27840

Summary

An extensible library that implements an LDAP like API to access remote LDAP

servers, or use local tdb databases.

Update to Samba 4.14.2 Security fixes for CVE-2020-27840, CVE-2020-27840

* Wed Mar 24 2021 Lukas Slebodnik - 2.3.0-1

- libldb-2.3.0 is required for new samba

[ 1 ] Bug #1941400 - CVE-2020-27840 samba: Heap corruption via crafted DN strings

https://bugzilla.redhat.com/show_bug.cgi?id=1941400

[ 2 ] Bug #1941402 - CVE-2021-20277 samba: Out of bounds read in AD DC LDAP server

https://bugzilla.redhat.com/show_bug.cgi?id=1941402

su -c 'dnf upgrade --advisory FEDORA-2021-c2d8628d33' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Product: Fedora 34
Version: 2.3.0
Release: 1.fc34
URL:
Summary: A schema-less, ldap like, API and database

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here