Linux · Security advisory · November 23, 2023
ELSA-2023-7467: Security update for 35 packages
ELSA-2023-7467, released November 23, 2023, fixes 3 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0269
85th percentile
Priority of the 3 CVEs
Patch now 0
Urgent 0
High 1
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| ctdb | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| libnetapi | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| libnetapi-devel | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| libsmbclient | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| libsmbclient-devel | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| libwbclient | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| libwbclient-devel | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| python3-samba | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| python3-samba-dc | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| python3-samba-devel | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| python3-samba-test | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-client | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-client-libs | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-common | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-common-libs | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-common-tools | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-dc-libs | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-dcerpc | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-devel | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-krb5-printing | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-ldb-ldap-modules | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-libs | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-pidl | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-test | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-test-libs | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-tools | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-usershares | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-vfs-glusterfs | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-vfs-iouring | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-winbind | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-winbind-clients | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-winbind-krb5-locator | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-winbind-modules | ol 8 | 0:4.18.6-2.0.1.el8_9 |
| samba-winexe | ol 8 | 0:4.18.6-2.0.1.el8_9 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2023-3961 | libsmbclient: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil... | 9.8 | 0.0269 | None reported | |
| Routine | CVE-2023-42669 | samba: A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/... | 6.5 | 0.0194 | None reported | |
| Routine | CVE-2023-4091 | samba: A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only per... | 6.5 | 0.0133 | None reported |
Showing 1 to 3 of 3
1