Red Hat Security AdvisoryRHSA-2016:0009
libldb security update
Released 2016-01-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libldb-1.1.20-1.el7_2.2
- Red Hat Enterprise Linux Client Optional (v. 7) ldb-tools-1.1.20-1.el7_2.2, libldb-devel-1.1.20-1.el7_2.2, pyldb-1.1.20-1.el7_2.2 +1
- Red Hat Enterprise Linux ComputeNode (v. 7) libldb-1.1.20-1.el7_2.2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ldb-tools-1.1.20-1.el7_2.2, libldb-devel-1.1.20-1.el7_2.2, pyldb-1.1.20-1.el7_2.2 +1
- Red Hat Enterprise Linux Desktop (v. 6) libldb-1.1.13-3.el6_7.1, libldb-devel-1.1.13-3.el6_7.1, pyldb-1.1.13-3.el6_7.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) ldb-tools-1.1.13-3.el6_7.1, pyldb-devel-1.1.13-3.el6_7.1
- Red Hat Enterprise Linux HPC Node (v. 6) libldb-1.1.13-3.el6_7.1, libldb-devel-1.1.13-3.el6_7.1, pyldb-1.1.13-3.el6_7.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ldb-tools-1.1.13-3.el6_7.1, pyldb-devel-1.1.13-3.el6_7.1
- Red Hat Enterprise Linux Server (v. 6) libldb-1.1.13-3.el6_7.1, libldb-1.1.13-3.el6_7.1.ppc, libldb-devel-1.1.13-3.el6_7.1 +2
- Red Hat Enterprise Linux Server (v. 7) libldb-1.1.20-1.el7_2.2, libldb-1.1.20-1.el7_2.2.ppc, pyldb-1.1.20-1.el7_2.2
- Red Hat Enterprise Linux Server Optional (v. 6) ldb-tools-1.1.13-3.el6_7.1, pyldb-devel-1.1.13-3.el6_7.1
- Red Hat Enterprise Linux Server Optional (v. 7) ldb-tools-1.1.20-1.el7_2.2, libldb-devel-1.1.20-1.el7_2.2, libldb-devel-1.1.20-1.el7_2.2.ppc +4
- Red Hat Enterprise Linux Workstation (v. 6) libldb-1.1.13-3.el6_7.1, libldb-devel-1.1.13-3.el6_7.1, pyldb-1.1.13-3.el6_7.1
- Red Hat Enterprise Linux Workstation (v. 7) libldb-1.1.20-1.el7_2.2, pyldb-1.1.20-1.el7_2.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) ldb-tools-1.1.13-3.el6_7.1, pyldb-devel-1.1.13-3.el6_7.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) ldb-tools-1.1.20-1.el7_2.2, libldb-devel-1.1.20-1.el7_2.2, pyldb-devel-1.1.20-1.el7_2.2
Fixes 2 records
Priority MEDIUM 42
ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemo…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.06164 · Published 2015-12-29 · Partial fix CWE-200
Priority LOW 34
The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows re…
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0694 · Published 2015-12-29 · Partial fix CWE-189
