Linux · Security advisory · November 18, 2023
ELSA-2023-7139: Security update for 3 packages
ELSA-2023-7139, released November 18, 2023, fixes 4 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.6240
99th percentile
Priority of the 4 CVEs
Patch now 0
Urgent 0
High 4
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| evolution-mapi | ol 8 | 0:3.28.3-8.el8 |
| evolution-mapi-langpacks | ol 8 | 0:3.28.3-8.el8 |
| openchange | ol 8 | 0:2.3-32.0.1.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2023-34966 | ctdb: An infinite loop vulnerability was found in Samba's mdssvc RPC service forSpotlight | 7.5 | 0.6240 | None reported | |
| High | CVE-2023-34967 | samba: A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight | 7.5 | 0.6120 | None reported | |
| High | CVE-2022-2127 | ldb-tools: An out-of-bounds read vulnerability was found in Samba due to insufficientlength checks in winbindd_pam_auth_crap.c | 7.5 | 0.0172 | None reported | |
| High | CVE-2023-34968 | libnss-winbind: A path disclosure vulnerability was found in Samba | 7.5 | 0.0133 | None reported |
Showing 1 to 4 of 4
1