ALAS2023-2023-187


Amazon Linux 2023 Security Advisory: ALAS2023-2023-187
Advisory Released Date: 2023-06-07
Advisory Updated Date: 2023-06-07
Severity: Medium

Issue Overview:

Access controlled AD LDAP attributes can be discovered (CVE-2023-0614)


Affected Packages:

libldb


Issue Correction:
Run dnf update libldb --releasever 2023.0.20230607 to update your system.

New Packages:
src:
    libldb-2.6.2-1.amzn2023.0.1.src

x86_64:
    python-ldb-devel-common-2.6.2-1.amzn2023.0.1.x86_64
    libldb-debuginfo-2.6.2-1.amzn2023.0.1.x86_64
    python3-ldb-debuginfo-2.6.2-1.amzn2023.0.1.x86_64
    ldb-tools-2.6.2-1.amzn2023.0.1.x86_64
    libldb-debugsource-2.6.2-1.amzn2023.0.1.x86_64
    ldb-tools-debuginfo-2.6.2-1.amzn2023.0.1.x86_64
    python3-ldb-2.6.2-1.amzn2023.0.1.x86_64
    libldb-devel-2.6.2-1.amzn2023.0.1.x86_64
    python3-ldb-devel-2.6.2-1.amzn2023.0.1.x86_64
    libldb-2.6.2-1.amzn2023.0.1.x86_64