Lucene search

K
mageiaGentoo FoundationMGASA-2020-0205
HistoryMay 08, 2020 - 1:57 p.m.

Updated samba packages fix security vulnerabilities

2020-05-0813:57:54
Gentoo Foundation
advisories.mageia.org
17

0.019 Low

EPSS

Percentile

88.5%

Updated samba packages fix security vulnerabilities: A client combining the ‘ASQ’ and ‘Paged Results’ LDAP controls can cause a use-after-free in Samba’s AD DC LDAP server (CVE-2020-10700). A deeply nested filter in an un-authenticated LDAP search can exhaust the LDAP server’s stack memory causing a SIGSEGV (CVE-2020-10704). The samba package has been updated to version 4.10.15, fixing these issues and other bugs. The ldb package has been updated to version 1.5.7. The sssd package has been rebuilt for the updated ldb.

OSVersionArchitecturePackageVersionFilename
Mageia7noarchsamba< 4.10.15-1samba-4.10.15-1.mga7
Mageia7noarchsssd< 1.16.3-3.2sssd-1.16.3-3.2.mga7
Mageia7noarchldb< 1.5.7-1ldb-1.5.7-1.mga7