Update to version 4.15.9 to address security fixes for CVE-2022-32742, CVE-2022-32744, CVE-2022-32745, CVE-2022-32746

How to install

sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-1479911a38

This update's test gating status has been changed to 'waiting'.

a week ago

This update has been submitted for testing by bodhi.

a week ago

This update's test gating status has been changed to 'failed'.

a week ago

This update's test gating status has been changed to 'passed'.

a week ago

This update has been pushed to testing.

a week ago
User Icon gd commented & provided feedback a week ago
karma

LGTM

BZ#2026711 CVE-2020-17049 samba: Kerberos: delegation constrain bypass in S4U2Proxy [fedora-all]
BZ#2108196 CVE-2022-32742 samba: server memory information leak via SMB1
BZ#2111729 CVE-2022-32742 samba: server memory information leak via SMB1 [fedora-all]
BZ#2111731 CVE-2022-32744 samba: AD users can forge password change requests for any user [fedora-all]
BZ#2111732 CVE-2022-32745 samba: AD users can crash the server process with an LDAP add or modify request [fedora-all]
BZ#2111734 CVE-2022-32746 samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request [fedora-all]
BZ#2111735 CVE-2022-32746 libldb: samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request [fedora-all]

Please login to add feedback.

Metadata
Type
security
Karma
1
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
14 days
Dates
submitted
a week ago
in testing
a week ago
days to stable
2
BZ#2026711 CVE-2020-17049 samba: Kerberos: delegation constrain bypass in S4U2Proxy [fedora-all]
0
1
BZ#2108196 CVE-2022-32742 samba: server memory information leak via SMB1
0
1
BZ#2111729 CVE-2022-32742 samba: server memory information leak via SMB1 [fedora-all]
0
1
BZ#2111731 CVE-2022-32744 samba: AD users can forge password change requests for any user [fedora-all]
0
1
BZ#2111732 CVE-2022-32745 samba: AD users can crash the server process with an LDAP add or modify request [fedora-all]
0
1
BZ#2111734 CVE-2022-32746 samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request [fedora-all]
0
1
BZ#2111735 CVE-2022-32746 libldb: samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request [fedora-all]
0
1

Automated Test Results

Test Cases

0 1 Test Case desktop network smb