Linux · Security advisory · December 13, 2021

RHSA-2021:5082: Security update for 25 packages

RHSA-2021:5082, released December 13, 2021, fixes 3 CVEs across 25 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0195
80th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
ctdbRHEL 80:4.14.5-7.el8_5
libsmbclientRHEL 80:4.14.5-7.el8_5
libsmbclient-develRHEL 80:4.14.5-7.el8_5
libwbclientRHEL 80:4.14.5-7.el8_5
libwbclient-develRHEL 80:4.14.5-7.el8_5
python3-sambaRHEL 80:4.14.5-7.el8_5
python3-samba-testRHEL 80:4.14.5-7.el8_5
sambaRHEL 80:4.14.5-7.el8_5
samba-clientRHEL 80:4.14.5-7.el8_5
samba-client-libsRHEL 80:4.14.5-7.el8_5
samba-commonRHEL 80:4.14.5-7.el8_5
samba-common-libsRHEL 80:4.14.5-7.el8_5
samba-common-toolsRHEL 80:4.14.5-7.el8_5
samba-develRHEL 80:4.14.5-7.el8_5
samba-krb5-printingRHEL 80:4.14.5-7.el8_5
samba-libsRHEL 80:4.14.5-7.el8_5
samba-pidlRHEL 80:4.14.5-7.el8_5
samba-testRHEL 80:4.14.5-7.el8_5
samba-test-libsRHEL 80:4.14.5-7.el8_5
samba-vfs-iouringRHEL 80:4.14.5-7.el8_5
samba-winbindRHEL 80:4.14.5-7.el8_5
samba-winbind-clientsRHEL 80:4.14.5-7.el8_5
samba-winbind-krb5-locatorRHEL 80:4.14.5-7.el8_5
samba-winbind-modulesRHEL 80:4.14.5-7.el8_5
samba-winexeRHEL 80:4.14.5-7.el8_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-23192 ctdb: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil... 8.1 0.0195 None reported
High CVE-2016-2124 ctdb: A flaw was found in the way samba implemented SMB1 authentication 8.1 0.0177 None reported
High CVE-2020-25717 libsmbclient0: A flaw was found in the way Samba maps domain users to local users 8.1 0.0163 None reported
Showing 1 to 3 of 3 1