Fedora 38: libldb Critical Samba Security Update 2023-7ac413b969 CVE-2023-0225, CVE-2023-0922, CVE-2023-0614

An extensible library that implements an LDAP like API to access remote LDAP

servers, or use local tdb databases.

Update to ldb 2.7.2 and samba 4.18.1 Security fixes for CVE-2023-0225,

CVE-2023-0922, CVE-2023-0614

* Wed Mar 29 2023 Guenther Deschner - 2.7.2-1

- rhbz#2182738 - libldb-2.7.2 is available

[ 1 ] Bug #2182738 - libldb-2.7.2 is available

https://bugzilla.redhat.com/show_bug.cgi?id=2182738

[ 2 ] Bug #2182773 - CVE-2023-0225 samba: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=2182773

[ 3 ] Bug #2182775 - CVE-2023-0922 samba: AD DC admin tool samba-tool sends passwords in cleartext [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=2182775

[ 4 ] Bug #2182777 - CVE-2023-0614 samba: Access controlled AD LDAP attributes can be discovered [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=2182777

[ 5 ] Bug #2182787 - samba-4.18.1 is available

https://bugzilla.redhat.com/show_bug.cgi?id=2182787

su -c 'dnf upgrade --advisory FEDORA-2023-7ac413b969' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam, report it: