Stay Secure with the Latest Linux Advisories

security advisorycriticalmageia

Mageia 8: MGASA-2023-0127 Critical Samba Security Update

Deletion of AD DC "dnsHostname" attribute by unprivileged authenticated users (CVE-2023-0225) Read access controlled AD LDAP attributes (CVE-2023-0614) Cleartext password sending by AD DC admin tool (CVE-2023-0922) . MGASA-2023-0127 - Updated ldb/samba packages fix security vulnerability Publication date: 06 Apr 2023 URL: https://advisories.mageia.org/MGASA-2023-0127.html Type: security Affected Mageia releases: 8 CVE: CVE-2023-0225 Deletion of AD DC "dnsHostname" attribute by unprivileged authenticated users (CVE-2023-0225) Read access controlled AD LDAP attributes (CVE-2023-0614) Cleartext password sending by AD DC admin tool (CVE-2023-0922) References: - https://bugs.mageia.org/show_bug.cgi?id=31735 - - - - https://lists.suse.com/pipermail/sle-security-updates/2023-March/014245.html - https://www.cve.org/CVERecord?id=CVE-2023-0225 SRPMS: - 8/core/ldb-2.5.3-1.mga8 - 8/core/samba-4.16.10-1.mga8 . The Mageia 2023-0127 update resolves vulnerabilities in ldb/samba concerning the management of attribute removal and the handling of passwords.. Mageia Security, Samba Update, ldb Security, Data Access Control, AD DC Issues. . Severity: Critical. LinuxSecurity.com Team

Apr 06, 2023 •Critical Mageia