Linux · Security advisory · April 28, 2020

RHSA-2020:1878: Security update for 24 packages

RHSA-2020:1878, released April 28, 2020, fixes 3 CVEs across 24 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0338
88th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 1 Routine 2

Fixed package versions

ProductReleaseFixed in
ctdbRHEL 80:4.11.2-13.el8
ctdb-testsRHEL 80:4.11.2-13.el8
libsmbclientRHEL 80:4.11.2-13.el8
libsmbclient-develRHEL 80:4.11.2-13.el8
libwbclientRHEL 80:4.11.2-13.el8
libwbclient-develRHEL 80:4.11.2-13.el8
openchangeRHEL 80:2.3-24.el8
python3-sambaRHEL 80:4.11.2-13.el8
python3-samba-testRHEL 80:4.11.2-13.el8
sambaRHEL 80:4.11.2-13.el8
samba-clientRHEL 80:4.11.2-13.el8
samba-client-libsRHEL 80:4.11.2-13.el8
samba-commonRHEL 80:4.11.2-13.el8
samba-common-libsRHEL 80:4.11.2-13.el8
samba-common-toolsRHEL 80:4.11.2-13.el8
samba-krb5-printingRHEL 80:4.11.2-13.el8
samba-libsRHEL 80:4.11.2-13.el8
samba-pidlRHEL 80:4.11.2-13.el8
samba-testRHEL 80:4.11.2-13.el8
samba-test-libsRHEL 80:4.11.2-13.el8
samba-winbindRHEL 80:4.11.2-13.el8
samba-winbind-clientsRHEL 80:4.11.2-13.el8
samba-winbind-krb5-locatorRHEL 80:4.11.2-13.el8
samba-winbind-modulesRHEL 80:4.11.2-13.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-10197 ctdb: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil... 9.1 0.0318 None reported
Routine CVE-2019-10218 ctdb: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil... 6.5 0.0338 None reported
Routine CVE-2019-14907 ctdb: All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.xbefore 4.11.5 have an issue where if it is se... 6.5 0.0315 None reported
Showing 1 to 3 of 3 1