Stay Secure with the Latest Linux Advisories

security advisorymoderateFedora

Fedora 37: 2023-fca3bfed78 Moderate: Samba Security Fixes

Update to ldb 2.6.2 and samba 4.17.7 Security fixes for CVE-2023-0225, CVE-2023-0922, CVE-2023-0614. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-fca3bfed78 2023-04-02 02:00:15.070761 --------------------------------------------------------------------------------Name : samba Product : Fedora 37 Version : 4.17.7 Release : 0.fc37 URL : Summary : Server and Client software to interoperate with Windows machines Description : Samba is the standard Windows interoperability suite of programs for Linux and Unix. --------------------------------------------------------------------------------Update Information: Update to ldb 2.6.2 and samba 4.17.7 Security fixes for CVE-2023-0225, CVE-2023-0922, CVE-2023-0614 --------------------------------------------------------------------------------ChangeLog: * Wed Mar 29 2023 Guenther Deschner - 4.17.7-0 - Update to version 4.17.7 - resolves: #2182772, #2182773 - Security fixes for CVE-2023-0225 - resolves: #2182774, #2182775 - Security fixes for CVE-2023-0922 - resolves: #2182776, #2182777 - Security fixes for CVE-2023-0614 --------------------------------------------------------------------------------References: [ 1 ] Bug #2182773 - CVE-2023-0225 samba: AD DC "dnsHostname" attribute can be deleted by unprivileged authenticated users [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2182773 [ 2 ] Bug #2182775 - CVE-2023-0922 samba: AD DC admin tool samba-tool sends passwords in cleartext [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2182775 [ 3 ] Bug #2182777 - CVE-2023-0614 samba: Access controlled AD LDAP attributes can be discovered [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2182777 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2023-fca3bfed78' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Fedora 37 has rolled out a samba update addressing critical security vulnerabilities, aimed at bolstering overall system integrity and protection.. Fedora Security Update,samba security fixes,access control vulnerabilities,cleartext passwords issue. . LinuxSecurity.com Team

Apr 02, 2023 Fedora