Linux · Security advisory · December 14, 2021

ELSA-2021-5082: Security update for 25 packages

ELSA-2021-5082, released December 14, 2021, fixes 3 CVEs across 25 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0195
80th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
ctdbol 80:4.14.5-7.el8_5
libsmbclientol 80:4.14.5-7.el8_5
libsmbclient-develol 80:4.14.5-7.el8_5
libwbclientol 80:4.14.5-7.el8_5
libwbclient-develol 80:4.14.5-7.el8_5
python3-sambaol 80:4.14.5-7.el8_5
python3-samba-testol 80:4.14.5-7.el8_5
sambaol 80:4.14.5-7.el8_5
samba-clientol 80:4.14.5-7.el8_5
samba-client-libsol 80:4.14.5-7.el8_5
samba-commonol 80:4.14.5-7.el8_5
samba-common-libsol 80:4.14.5-7.el8_5
samba-common-toolsol 80:4.14.5-7.el8_5
samba-develol 80:4.14.5-7.el8_5
samba-krb5-printingol 80:4.14.5-7.el8_5
samba-libsol 80:4.14.5-7.el8_5
samba-pidlol 80:4.14.5-7.el8_5
samba-testol 80:4.14.5-7.el8_5
samba-test-libsol 80:4.14.5-7.el8_5
samba-vfs-iouringol 80:4.14.5-7.el8_5
samba-winbindol 80:4.14.5-7.el8_5
samba-winbind-clientsol 80:4.14.5-7.el8_5
samba-winbind-krb5-locatorol 80:4.14.5-7.el8_5
samba-winbind-modulesol 80:4.14.5-7.el8_5
samba-winexeol 80:4.14.5-7.el8_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-23192 ctdb: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil... 8.1 0.0195 None reported
High CVE-2016-2124 ctdb: A flaw was found in the way samba implemented SMB1 authentication 8.1 0.0177 None reported
High CVE-2020-25717 libsmbclient0: A flaw was found in the way Samba maps domain users to local users 8.1 0.0163 None reported
Showing 1 to 3 of 3 1