ALSA-2023:4328: Security update for 34 packages

ALSA-2023:4328, released July 31, 2023, fixes 1 CVE across 34 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

5.9

Base score, 0 to 10

Highest EPSS

0.0044

38th percentile

Fixed package versions

Product	Release	Fixed in
ctdb	almalinux 8	4.17.5-3.el8_8.alma
libnetapi	almalinux 8	4.17.5-3.el8_8.alma
libnetapi-devel	almalinux 8	4.17.5-3.el8_8.alma
libsmbclient	almalinux 8	4.17.5-3.el8_8.alma
libsmbclient-devel	almalinux 8	4.17.5-3.el8_8.alma
libwbclient	almalinux 8	4.17.5-3.el8_8.alma
libwbclient-devel	almalinux 8	4.17.5-3.el8_8.alma
python3-samba	almalinux 8	4.17.5-3.el8_8.alma
python3-samba-dc	almalinux 8	4.17.5-3.el8_8.alma
python3-samba-devel	almalinux 8	4.17.5-3.el8_8.alma
python3-samba-test	almalinux 8	4.17.5-3.el8_8.alma
samba	almalinux 8	4.17.5-3.el8_8.alma
samba-client	almalinux 8	4.17.5-3.el8_8.alma
samba-client-libs	almalinux 8	4.17.5-3.el8_8.alma
samba-common	almalinux 8	4.17.5-3.el8_8.alma
samba-common-libs	almalinux 8	4.17.5-3.el8_8.alma
samba-common-tools	almalinux 8	4.17.5-3.el8_8.alma
samba-dc-libs	almalinux 8	4.17.5-3.el8_8.alma
samba-dcerpc	almalinux 8	4.17.5-3.el8_8.alma
samba-devel	almalinux 8	4.17.5-3.el8_8.alma
samba-krb5-printing	almalinux 8	4.17.5-3.el8_8.alma
samba-ldb-ldap-modules	almalinux 8	4.17.5-3.el8_8.alma
samba-libs	almalinux 8	4.17.5-3.el8_8.alma
samba-pidl	almalinux 8	4.17.5-3.el8_8.alma
samba-test	almalinux 8	4.17.5-3.el8_8.alma
samba-test-libs	almalinux 8	4.17.5-3.el8_8.alma
samba-tools	almalinux 8	4.17.5-3.el8_8.alma
samba-usershares	almalinux 8	4.17.5-3.el8_8.alma
samba-vfs-iouring	almalinux 8	4.17.5-3.el8_8.alma
samba-winbind	almalinux 8	4.17.5-3.el8_8.alma
samba-winbind-clients	almalinux 8	4.17.5-3.el8_8.alma
samba-winbind-krb5-locator	almalinux 8	4.17.5-3.el8_8.alma
samba-winbind-modules	almalinux 8	4.17.5-3.el8_8.alma
samba-winexe	almalinux 8	4.17.5-3.el8_8.alma

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Routine	CVE-2023-3347	samba: A vulnerability was found in Samba's SMB2 packet signing mechanism	5.9	0.0044	None reported

Also fixes CVE-2023-3347

ALAS2023-2023-316
libnetapi, libnetapi-debuginfo, libnetapi-devel and 52 more on amzn 2023
ELSA-2023-4325
libnetapi, libnetapi-devel, libsmbclient and 30 more on ol 9
ELSA-2023-4328
ctdb, libnetapi, libnetapi-devel and 32 more on ol 8
ALSA-2023:4325
ctdb, libnetapi, libnetapi-devel and 31 more on almalinux 9
RHSA-2023:4325
ctdb, libnetapi, libnetapi-devel and 31 more on RHEL 9
RHSA-2023:4328
ctdb, libnetapi, libnetapi-devel and 31 more on RHEL 8
DEBIAN-CVE-2023-3347
samba on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14

Vendor advisory

https://osv.dev/vulnerability/ALSA-2023:4328

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.