Linux · Security advisory · November 22, 2023
RHSA-2023:7467: Security update for 34 packages
RHSA-2023:7467, released November 22, 2023, fixes 3 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0269
85th percentile
Priority of the 3 CVEs
Patch now 0
Urgent 0
High 1
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| ctdb | RHEL 8 | 0:4.18.6-2.el8_9 |
| libnetapi | RHEL 8 | 0:4.18.6-2.el8_9 |
| libnetapi-devel | RHEL 8 | 0:4.18.6-2.el8_9 |
| libsmbclient | RHEL 8 | 0:4.18.6-2.el8_9 |
| libsmbclient-devel | RHEL 8 | 0:4.18.6-2.el8_9 |
| libwbclient | RHEL 8 | 0:4.18.6-2.el8_9 |
| libwbclient-devel | RHEL 8 | 0:4.18.6-2.el8_9 |
| python3-samba | RHEL 8 | 0:4.18.6-2.el8_9 |
| python3-samba-dc | RHEL 8 | 0:4.18.6-2.el8_9 |
| python3-samba-devel | RHEL 8 | 0:4.18.6-2.el8_9 |
| python3-samba-test | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-client | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-client-libs | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-common | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-common-libs | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-common-tools | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-dc-libs | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-dcerpc | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-devel | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-krb5-printing | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-ldb-ldap-modules | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-libs | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-pidl | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-test | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-test-libs | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-tools | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-usershares | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-vfs-iouring | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-winbind | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-winbind-clients | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-winbind-krb5-locator | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-winbind-modules | RHEL 8 | 0:4.18.6-2.el8_9 |
| samba-winexe | RHEL 8 | 0:4.18.6-2.el8_9 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2023-3961 | libsmbclient: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil... | 9.8 | 0.0269 | None reported | |
| Routine | CVE-2023-42669 | samba: A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/... | 6.5 | 0.0194 | None reported | |
| Routine | CVE-2023-4091 | samba: A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only per... | 6.5 | 0.0133 | None reported |
Showing 1 to 3 of 3
1