Summary
The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases.
The following packages have been upgraded to a later upstream version: libldb (2.5.2). (BZ#2077484)
Security Fix(es):
* samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request (CVE-2022-32746)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | ldb-tools | 2.5.2-2.el8 |
| AlmaLinux · 8 | libldb | 2.5.2-2.el8 |
| AlmaLinux · 8 | libldb-devel | 2.5.2-2.el8 |
| AlmaLinux · 8 | python-ldb-devel-common | 2.5.2-2.el8 |
| AlmaLinux · 8 | python3-ldb | 2.5.2-2.el8 |
| AlmaLinux · 8 | python3-ldb-devel | 2.5.2-2.el8 |
Vulnerabilities 1
-
Unscored —
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values fr…