Fedora 37: FEDORA-2023-fca3bfed78 Critical Samba Access Control Fix

An extensible library that implements an LDAP like API to access remote LDAP

servers, or use local tdb databases.

Update to ldb 2.6.2 and samba 4.17.7 Security fixes for CVE-2023-0225,

CVE-2023-0922, CVE-2023-0614

* Wed Mar 29 2023 Guenther Deschner - 2.6.2-1

- Update to libldb-2.6.2

[ 1 ] Bug #2182773 - CVE-2023-0225 samba: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=2182773

[ 2 ] Bug #2182775 - CVE-2023-0922 samba: AD DC admin tool samba-tool sends passwords in cleartext [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=2182775

[ 3 ] Bug #2182777 - CVE-2023-0614 samba: Access controlled AD LDAP attributes can be discovered [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=2182777

su -c 'dnf upgrade --advisory FEDORA-2023-fca3bfed78' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam, report it: