ALSA-2023:7139

See a problem?
Please try reporting it to the source first.
Source
https://errata.almalinux.org/8/ALSA-2023-7139.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2023:7139.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2023:7139
Related
Published
2023-11-14T00:00:00Z
Modified
2023-11-23T10:21:55Z
Summary
Moderate: samba security, bug fix, and enhancement update
Details

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190417)

Security Fix(es):

  • samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127)
  • samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966)
  • samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967)
  • samba: spotlight server-side share path disclosure (CVE-2023-34968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:8 / ctdb

Package

Name
ctdb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / libnetapi

Package

Name
libnetapi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / libnetapi-devel

Package

Name
libnetapi-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / libsmbclient

Package

Name
libsmbclient

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / libsmbclient-devel

Package

Name
libsmbclient-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / libwbclient

Package

Name
libwbclient

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / libwbclient-devel

Package

Name
libwbclient-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / python3-samba

Package

Name
python3-samba

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / python3-samba-dc

Package

Name
python3-samba-dc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / python3-samba-devel

Package

Name
python3-samba-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / python3-samba-test

Package

Name
python3-samba-test

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba

Package

Name
samba

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-client

Package

Name
samba-client

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-client-libs

Package

Name
samba-client-libs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-common

Package

Name
samba-common

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-common-libs

Package

Name
samba-common-libs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-common-tools

Package

Name
samba-common-tools

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-dc-libs

Package

Name
samba-dc-libs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-dcerpc

Package

Name
samba-dcerpc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-devel

Package

Name
samba-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-krb5-printing

Package

Name
samba-krb5-printing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-ldb-ldap-modules

Package

Name
samba-ldb-ldap-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-libs

Package

Name
samba-libs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-pidl

Package

Name
samba-pidl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-test

Package

Name
samba-test

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-test-libs

Package

Name
samba-test-libs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-tools

Package

Name
samba-tools

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-usershares

Package

Name
samba-usershares

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-vfs-iouring

Package

Name
samba-vfs-iouring

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-winbind

Package

Name
samba-winbind

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-winbind-clients

Package

Name
samba-winbind-clients

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-winbind-krb5-locator

Package

Name
samba-winbind-krb5-locator

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-winbind-modules

Package

Name
samba-winbind-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8

AlmaLinux:8 / samba-winexe

Package

Name
samba-winexe

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.18.6-1.el8