Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-4091: SMB client can truncate files to 0 bytes by opening files with OVERWRITE disposition when using the acl_xattr Samba VFS module with the smb.conf setting "acl_xattr:ignore system acls = yes" CVE-2023-3961: Samba is vulnerable to path traversal due to insufficient sanitization of clients incoming pipe names. This can lead to the client connecting to as root to a Unix domain socket outside of the Samba private directory.
Fixed packages 55
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | libnetapi | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | libnetapi-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | libnetapi-devel | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | libsmbclient | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | libsmbclient-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | libsmbclient-devel | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | libwbclient | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | libwbclient-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | libwbclient-devel | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3-samba | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3-samba-dc | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3-samba-dc-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3-samba-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3-samba-devel | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | python3-samba-test | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-client | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-client-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-client-libs | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-client-libs-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-common | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-common-libs | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-common-libs-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-common-tools | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-common-tools-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-dc-libs | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-dc-libs-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-dcerpc | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-dcerpc-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-debugsource | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-devel | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-krb5-printing | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-krb5-printing-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-ldb-ldap-modules | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-ldb-ldap-modules-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-libs | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-libs-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-pidl | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-test | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-test-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-test-libs | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-test-libs-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-tools | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-usershares | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-vfs-iouring | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-vfs-iouring-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-winbind | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-winbind-clients | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-winbind-clients-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-winbind-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-winbind-krb5-locator | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-winbind-krb5-locator-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-winbind-modules | 2:4.17.12-1.amzn2023.0.1 |
| Amazon Linux · 2023 | samba-winbind-modules-debuginfo | 2:4.17.12-1.amzn2023.0.1 |
Vulnerabilities 2
-
Critical 9.1
Samba: smbd allows client access to unix domain sockets on the file system as root
A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call (RPC) services like SAMR…
-
Medium 6.5
Samba: smb clients can truncate files with read-only permissions
A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files …