]> git.ipfire.org Git - thirdparty/samba.git/commit
projects / thirdparty / samba.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0973b2f) | patch
CVE-2026-58222: s4:ldap_server: don't allow untrusted compare requests for confidenti... master
authorStefan Metzmacher <metze@samba.org>
Wed, 24 Jun 2026 12:42:11 +0000 (14:42 +0200)
committerBjoern Jacke <bjacke@samba.org>
Tue, 28 Jul 2026 17:02:13 +0000 (17:02 +0000)
commit07786681889b972b2b78ccb854f23443e57cb87c
tree59441d487d3851c2b5ce5ed11f14b2f7f83afccftree | snapshot
parent0973b2faa211dd3ccb4c4d86f0b8c62d36f68e9dcommit | diff
CVE-2026-58222: s4:ldap_server: don't allow untrusted compare requests for confidential attributes

This means we apply acl checks against the search filter similar
to normal ldb searches.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=16148

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Autobuild-User(master): Björn Jacke <bjacke@samba.org>
Autobuild-Date(master): Tue Jul 28 17:02:13 UTC 2026 on atb-devel-224
source4/ldap_server/ldap_backend.c diff | blob | blame | history
Mirror of https://github.com/samba-team/samba.git