# RHSA-2023:6667: Security update for 34 packages RHSA-2023:6667, released November 7, 2023, fixes 4 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/rhsa-2023-6667 - Platform: Linux - Released: Nov 7, 2023 - Priority: High (Closes CVE-2023-34966, high severity) - CVEs: 4, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2023:6667 ## Applies to | Product | Release | Fixed in | |---|---|---| | [ctdb](https://patchblox.com/security/data/product/linux/ctdb.md) | RHEL 9 | 0:4.18.6-100.el9 | | [libnetapi](https://patchblox.com/security/data/product/linux/libnetapi.md) | RHEL 9 | 0:4.18.6-100.el9 | | [libnetapi-devel](https://patchblox.com/security/data/product/linux/libnetapi-devel.md) | RHEL 9 | 0:4.18.6-100.el9 | | [libsmbclient](https://patchblox.com/security/data/product/linux/libsmbclient.md) | RHEL 9 | 0:4.18.6-100.el9 | | [libsmbclient-devel](https://patchblox.com/security/data/product/linux/libsmbclient-devel.md) | RHEL 9 | 0:4.18.6-100.el9 | | [libwbclient](https://patchblox.com/security/data/product/linux/libwbclient.md) | RHEL 9 | 0:4.18.6-100.el9 | | [libwbclient-devel](https://patchblox.com/security/data/product/linux/libwbclient-devel.md) | RHEL 9 | 0:4.18.6-100.el9 | | [python3-samba](https://patchblox.com/security/data/product/linux/python3-samba.md) | RHEL 9 | 0:4.18.6-100.el9 | | [python3-samba-dc](https://patchblox.com/security/data/product/linux/python3-samba-dc.md) | RHEL 9 | 0:4.18.6-100.el9 | | [python3-samba-devel](https://patchblox.com/security/data/product/linux/python3-samba-devel.md) | RHEL 9 | 0:4.18.6-100.el9 | | [python3-samba-test](https://patchblox.com/security/data/product/linux/python3-samba-test.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba](https://patchblox.com/security/data/product/linux/samba.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-client](https://patchblox.com/security/data/product/linux/samba-client.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-client-libs](https://patchblox.com/security/data/product/linux/samba-client-libs.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-common](https://patchblox.com/security/data/product/linux/samba-common.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-common-libs](https://patchblox.com/security/data/product/linux/samba-common-libs.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-common-tools](https://patchblox.com/security/data/product/linux/samba-common-tools.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-dc-libs](https://patchblox.com/security/data/product/linux/samba-dc-libs.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-dcerpc](https://patchblox.com/security/data/product/linux/samba-dcerpc.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-devel](https://patchblox.com/security/data/product/linux/samba-devel.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-krb5-printing](https://patchblox.com/security/data/product/linux/samba-krb5-printing.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-ldb-ldap-modules](https://patchblox.com/security/data/product/linux/samba-ldb-ldap-modules.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-libs](https://patchblox.com/security/data/product/linux/samba-libs.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-pidl](https://patchblox.com/security/data/product/linux/samba-pidl.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-test](https://patchblox.com/security/data/product/linux/samba-test.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-test-libs](https://patchblox.com/security/data/product/linux/samba-test-libs.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-tools](https://patchblox.com/security/data/product/linux/samba-tools.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-usershares](https://patchblox.com/security/data/product/linux/samba-usershares.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-vfs-iouring](https://patchblox.com/security/data/product/linux/samba-vfs-iouring.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-winbind](https://patchblox.com/security/data/product/linux/samba-winbind.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-winbind-clients](https://patchblox.com/security/data/product/linux/samba-winbind-clients.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-winbind-krb5-locator](https://patchblox.com/security/data/product/linux/samba-winbind-krb5-locator.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-winbind-modules](https://patchblox.com/security/data/product/linux/samba-winbind-modules.md) | RHEL 9 | 0:4.18.6-100.el9 | | [samba-winexe](https://patchblox.com/security/data/product/linux/samba-winexe.md) | RHEL 9 | 0:4.18.6-100.el9 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2023-34966](https://patchblox.com/security/data/cve/CVE-2023-34966.md) | High | ctdb: An infinite loop vulnerability was found in Samba's mdssvc RPC service forSpotlight | 7.5 | 0.6240 | | | [CVE-2023-34967](https://patchblox.com/security/data/cve/CVE-2023-34967.md) | High | samba: A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight | 7.5 | 0.6120 | | | [CVE-2022-2127](https://patchblox.com/security/data/cve/CVE-2022-2127.md) | High | ldb-tools: An out-of-bounds read vulnerability was found in Samba due to insufficientlength checks in winbindd_pam_auth_crap.c | 7.5 | 0.0172 | | | [CVE-2023-34968](https://patchblox.com/security/data/cve/CVE-2023-34968.md) | High | libnss-winbind: A path disclosure vulnerability was found in Samba | 7.5 | 0.0133 | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo