ALAS2023-2023-187


Amazon Linux 2023 Security Advisory: ALAS-2023-187
Advisory Release Date: 2023-05-25 17:41 Pacific
Advisory Updated Date: 2023-06-07 20:08 Pacific
Severity: Medium

Issue Overview:

Access controlled AD LDAP attributes can be discovered (CVE-2023-0614)


Affected Packages:

libldb


Issue Correction:
Run dnf update libldb --releasever 2023.0.20230607 to update your system.

New Packages:
src:
    libldb-2.6.2-1.amzn2023.0.1.src

x86_64:
    python-ldb-devel-common-2.6.2-1.amzn2023.0.1.x86_64
    libldb-debuginfo-2.6.2-1.amzn2023.0.1.x86_64
    python3-ldb-debuginfo-2.6.2-1.amzn2023.0.1.x86_64
    ldb-tools-2.6.2-1.amzn2023.0.1.x86_64
    libldb-debugsource-2.6.2-1.amzn2023.0.1.x86_64
    ldb-tools-debuginfo-2.6.2-1.amzn2023.0.1.x86_64
    python3-ldb-2.6.2-1.amzn2023.0.1.x86_64
    libldb-devel-2.6.2-1.amzn2023.0.1.x86_64
    python3-ldb-devel-2.6.2-1.amzn2023.0.1.x86_64
    libldb-2.6.2-1.amzn2023.0.1.x86_64