Medium ALAS2023-2023-187 1 CVE

Moderate: libldb security update (Amazon Linux 2023)

Published May 25, 2023 · Updated Jun 7, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-0614: Access controlled AD LDAP attributes can be discovered

Fixed packages 10

Release	Package	Fixed in
Amazon Linux · 2023	ldb-tools	0:2.6.2-1.amzn2023.0.1
Amazon Linux · 2023	ldb-tools-debuginfo	0:2.6.2-1.amzn2023.0.1
Amazon Linux · 2023	libldb	0:2.6.2-1.amzn2023.0.1
Amazon Linux · 2023	libldb-debuginfo	0:2.6.2-1.amzn2023.0.1
Amazon Linux · 2023	libldb-debugsource	0:2.6.2-1.amzn2023.0.1
Amazon Linux · 2023	libldb-devel	0:2.6.2-1.amzn2023.0.1
Amazon Linux · 2023	python-ldb-devel-common	0:2.6.2-1.amzn2023.0.1
Amazon Linux · 2023	python3-ldb	0:2.6.2-1.amzn2023.0.1
Amazon Linux · 2023	python3-ldb-debuginfo	0:2.6.2-1.amzn2023.0.1
Amazon Linux · 2023	python3-ldb-devel	0:2.6.2-1.amzn2023.0.1

Vulnerabilities 1

High 7.7

CVE-2023-0614

The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insu…

samba samba samba ldb Debian Ubuntu Azure Linux

Apr 3, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-0614.html