HCE2-SA-2022-0008 Important HCE 2.0 Security Fix(es): In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values. (CVE-2022-1615) A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover. (CVE-2022-32744) A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault. (CVE-2022-32745) Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it. (CVE-2022-32743) A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other services. (CVE-2022-2031) A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer). (CVE-2022-32742) A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl. (CVE-2022-32746) HCE 2.0 ctdb-4.15.3-4.r11.hce2.aarch64.rpm libsmbclient-4.15.3-4.r11.hce2.aarch64.rpm libsmbclient-devel-4.15.3-4.r11.hce2.aarch64.rpm libwbclient-4.15.3-4.r11.hce2.aarch64.rpm libwbclient-devel-4.15.3-4.r11.hce2.aarch64.rpm python3-samba-4.15.3-4.r11.hce2.aarch64.rpm python3-samba-dc-4.15.3-4.r11.hce2.aarch64.rpm python3-samba-test-4.15.3-4.r11.hce2.aarch64.rpm samba-4.15.3-4.r11.hce2.aarch64.rpm samba-client-4.15.3-4.r11.hce2.aarch64.rpm samba-common-4.15.3-4.r11.hce2.aarch64.rpm samba-common-tools-4.15.3-4.r11.hce2.aarch64.rpm samba-dc-4.15.3-4.r11.hce2.aarch64.rpm samba-dc-bind-dlz-4.15.3-4.r11.hce2.aarch64.rpm samba-dc-provision-4.15.3-4.r11.hce2.aarch64.rpm samba-devel-4.15.3-4.r11.hce2.aarch64.rpm samba-help-4.15.3-4.r11.hce2.aarch64.rpm samba-krb5-printing-4.15.3-4.r11.hce2.aarch64.rpm samba-libs-4.15.3-4.r11.hce2.aarch64.rpm samba-pidl-4.15.3-4.r11.hce2.noarch.rpm samba-test-4.15.3-4.r11.hce2.aarch64.rpm samba-winbind-4.15.3-4.r11.hce2.aarch64.rpm samba-winbind-clients-4.15.3-4.r11.hce2.aarch64.rpm samba-winbind-krb5-locator-4.15.3-4.r11.hce2.aarch64.rpm samba-winbind-modules-4.15.3-4.r11.hce2.aarch64.rpm ctdb-4.15.3-4.r11.hce2.x86_64.rpm libsmbclient-4.15.3-4.r11.hce2.x86_64.rpm libsmbclient-devel-4.15.3-4.r11.hce2.x86_64.rpm libwbclient-4.15.3-4.r11.hce2.x86_64.rpm libwbclient-devel-4.15.3-4.r11.hce2.x86_64.rpm python3-samba-4.15.3-4.r11.hce2.x86_64.rpm python3-samba-dc-4.15.3-4.r11.hce2.x86_64.rpm python3-samba-test-4.15.3-4.r11.hce2.x86_64.rpm samba-4.15.3-4.r11.hce2.x86_64.rpm samba-client-4.15.3-4.r11.hce2.x86_64.rpm samba-common-4.15.3-4.r11.hce2.x86_64.rpm samba-common-tools-4.15.3-4.r11.hce2.x86_64.rpm samba-dc-4.15.3-4.r11.hce2.x86_64.rpm samba-dc-bind-dlz-4.15.3-4.r11.hce2.x86_64.rpm samba-dc-provision-4.15.3-4.r11.hce2.x86_64.rpm samba-devel-4.15.3-4.r11.hce2.x86_64.rpm samba-help-4.15.3-4.r11.hce2.x86_64.rpm samba-krb5-printing-4.15.3-4.r11.hce2.x86_64.rpm samba-libs-4.15.3-4.r11.hce2.x86_64.rpm samba-test-4.15.3-4.r11.hce2.x86_64.rpm samba-vfs-glusterfs-4.15.3-4.r11.hce2.x86_64.rpm samba-winbind-4.15.3-4.r11.hce2.x86_64.rpm samba-winbind-clients-4.15.3-4.r11.hce2.x86_64.rpm samba-winbind-krb5-locator-4.15.3-4.r11.hce2.x86_64.rpm samba-winbind-modules-4.15.3-4.r11.hce2.x86_64.rpm