Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia 8: MGASA-2022-0299 Moderate: Samba Security Issues Fixed

mageia
Calendar Grey August 25, 2022
Dist Mageia Esm H88
Investigate Mageia 2022-0299, which tackles significant Active Directory modifications and security vulnerabilities in ldb, samba, and sssd software packages.
Fixed AD restrictions bypass associated with changing passwords (bsc#1201495)

Summary

Fixed AD restrictions bypass associated with changing passwords (bsc#1201495). (CVE-2022-2031) Fixed a memory leak in SMB1 (bsc#1201496). (CVE-2022-32742) Fixed an arbitrary password change request for any AD user (bsc#1201493). (CVE-2022-32744) Fixed a remote server crash with an LDAP add or modify request (bsc#1201492) (CVE-2022-32745) Fixed a use-after-free occurring in database audit logging (bsc#1201490). (CVE-2022-32746)

References

- https://bugs.mageia.org/show_bug.cgi?id=30675

-

-

-

-

-

-

- https://ubuntu.com/security/notices/USN-5542-1

- https://lists.debian.org/debian-security-announce/2022/msg00174.html

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2RORIRLFLRNQOCVXQU4V3RLZ5C2G75L2/

- https://www.cve.org/CVERecord?id=CVE-2022-2031

- https://www.cve.org/CVERecord?id=CVE-2022-32742

- https://www.cve.org/CVERecord?id=CVE-2022-32744

- https://www.cve.org/CVERecord?id=CVE-2022-32745

- https://www.cve.org/CVERecord?id=CVE-2022-32746

Topics%20covered

Topics Covered

security advisory memory leak ldap issue password change mageia ad restrictions

Resolution

SRPMS

- 8/core/ldb-2.3.4-1.mga8

- 8/core/samba-4.14.14-1.mga8

- 8/core/sssd-2.4.0-1.4.mga8

Publication date: 25 Aug 2022
URL: https://advisories.mageia.org/MGASA-2022-0299.html
Type: security
CVE: CVE-2022-2031, CVE-2022-32742, CVE-2022-32744, CVE-2022-32745, CVE-2022-32746

Topics%20covered

Topics Covered

security advisory memory leak ldap issue password change mageia ad restrictions

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here