Linux · Security advisory · November 7, 2023

RHSA-2023:6667: Security update for 34 packages

RHSA-2023:6667, released November 7, 2023, fixes 4 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.6240
99th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
ctdbRHEL 90:4.18.6-100.el9
libnetapiRHEL 90:4.18.6-100.el9
libnetapi-develRHEL 90:4.18.6-100.el9
libsmbclientRHEL 90:4.18.6-100.el9
libsmbclient-develRHEL 90:4.18.6-100.el9
libwbclientRHEL 90:4.18.6-100.el9
libwbclient-develRHEL 90:4.18.6-100.el9
python3-sambaRHEL 90:4.18.6-100.el9
python3-samba-dcRHEL 90:4.18.6-100.el9
python3-samba-develRHEL 90:4.18.6-100.el9
python3-samba-testRHEL 90:4.18.6-100.el9
sambaRHEL 90:4.18.6-100.el9
samba-clientRHEL 90:4.18.6-100.el9
samba-client-libsRHEL 90:4.18.6-100.el9
samba-commonRHEL 90:4.18.6-100.el9
samba-common-libsRHEL 90:4.18.6-100.el9
samba-common-toolsRHEL 90:4.18.6-100.el9
samba-dc-libsRHEL 90:4.18.6-100.el9
samba-dcerpcRHEL 90:4.18.6-100.el9
samba-develRHEL 90:4.18.6-100.el9
samba-krb5-printingRHEL 90:4.18.6-100.el9
samba-ldb-ldap-modulesRHEL 90:4.18.6-100.el9
samba-libsRHEL 90:4.18.6-100.el9
samba-pidlRHEL 90:4.18.6-100.el9
samba-testRHEL 90:4.18.6-100.el9
samba-test-libsRHEL 90:4.18.6-100.el9
samba-toolsRHEL 90:4.18.6-100.el9
samba-usersharesRHEL 90:4.18.6-100.el9
samba-vfs-iouringRHEL 90:4.18.6-100.el9
samba-winbindRHEL 90:4.18.6-100.el9
samba-winbind-clientsRHEL 90:4.18.6-100.el9
samba-winbind-krb5-locatorRHEL 90:4.18.6-100.el9
samba-winbind-modulesRHEL 90:4.18.6-100.el9
samba-winexeRHEL 90:4.18.6-100.el9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-34966 ctdb: An infinite loop vulnerability was found in Samba's mdssvc RPC service forSpotlight 7.5 0.6240 None reported
High CVE-2023-34967 samba: A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight 7.5 0.6120 None reported
High CVE-2022-2127 ldb-tools: An out-of-bounds read vulnerability was found in Samba due to insufficientlength checks in winbindd_pam_auth_crap.c 7.5 0.0172 None reported
High CVE-2023-34968 libnss-winbind: A path disclosure vulnerability was found in Samba 7.5 0.0133 None reported
Showing 1 to 4 of 4 1