Linux · Security advisory · May 17, 2022

ELSA-2022-2074: Security update for 25 packages

ELSA-2022-2074, released May 17, 2022, fixes 2 CVEs across 25 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0109
65th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 0 Routine 2

Fixed package versions

ProductReleaseFixed in
ctdbol 80:4.15.5-5.el8
libsmbclientol 80:4.15.5-5.el8
libsmbclient-develol 80:4.15.5-5.el8
libwbclientol 80:4.15.5-5.el8
libwbclient-develol 80:4.15.5-5.el8
python3-sambaol 80:4.15.5-5.el8
python3-samba-testol 80:4.15.5-5.el8
sambaol 80:4.15.5-5.el8
samba-clientol 80:4.15.5-5.el8
samba-client-libsol 80:4.15.5-5.el8
samba-commonol 80:4.15.5-5.el8
samba-common-libsol 80:4.15.5-5.el8
samba-common-toolsol 80:4.15.5-5.el8
samba-develol 80:4.15.5-5.el8
samba-krb5-printingol 80:4.15.5-5.el8
samba-libsol 80:4.15.5-5.el8
samba-pidlol 80:4.15.5-5.el8
samba-testol 80:4.15.5-5.el8
samba-test-libsol 80:4.15.5-5.el8
samba-vfs-iouringol 80:4.15.5-5.el8
samba-winbindol 80:4.15.5-5.el8
samba-winbind-clientsol 80:4.15.5-5.el8
samba-winbind-krb5-locatorol 80:4.15.5-5.el8
samba-winbind-modulesol 80:4.15.5-5.el8
samba-winexeol 80:4.15.5-5.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2021-44141 ctdb: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil... 6.5 0.0109 None reported
Routine CVE-2021-20316 ctdb: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil... 6.8 0.0104 None reported
Showing 1 to 2 of 2 1