Summary
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.
The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190415)
Security Fix(es):
* samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127)
* samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966)
* samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967)
* samba: spotlight server-side share path disclosure (CVE-2023-34968)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 34
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | ctdb | 4.18.6-100.el9 |
| AlmaLinux · 9 | libnetapi | 4.18.6-100.el9 |
| AlmaLinux · 9 | libnetapi-devel | 4.18.6-100.el9 |
| AlmaLinux · 9 | libsmbclient | 4.18.6-100.el9 |
| AlmaLinux · 9 | libsmbclient-devel | 4.18.6-100.el9 |
| AlmaLinux · 9 | libwbclient | 4.18.6-100.el9 |
| AlmaLinux · 9 | libwbclient-devel | 4.18.6-100.el9 |
| AlmaLinux · 9 | python3-samba | 4.18.6-100.el9 |
| AlmaLinux · 9 | python3-samba-dc | 4.18.6-100.el9 |
| AlmaLinux · 9 | python3-samba-devel | 4.18.6-100.el9 |
| AlmaLinux · 9 | python3-samba-test | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-client | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-client-libs | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-common | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-common-libs | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-common-tools | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-dc-libs | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-dcerpc | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-devel | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-krb5-printing | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-ldb-ldap-modules | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-libs | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-pidl | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-test | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-test-libs | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-tools | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-usershares | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-vfs-iouring | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-winbind | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-winbind-clients | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-winbind-krb5-locator | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-winbind-modules | 4.18.6-100.el9 |
| AlmaLinux · 9 | samba-winexe | 4.18.6-100.el9 |
Vulnerabilities 4
-
High 7.5CVE-2023-34966 EPSS 62%
Samba: infinite loop in mdssvc rpc service for spotlight
An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not validate a field in the network packet that contains t…
-
Medium 5.9
Samba: out-of-bounds read in winbind auth_crap
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, …
-
Medium 5.3CVE-2023-34967 EPSS 61%
Samba: type confusion in mdssvc rpc service for spotlight
A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the …
-
Medium 5.3
Samba: spotlight server-side share path disclosure
A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a…
References
-
report
https://access.redhat.com/security/cve/CVE-2022-2127
-
report
https://access.redhat.com/security/cve/CVE-2023-34966
-
report
https://access.redhat.com/security/cve/CVE-2023-34967
-
report
https://access.redhat.com/security/cve/CVE-2023-34968
-
report
https://bugzilla.redhat.com/2222791
-
report
https://bugzilla.redhat.com/2222793
-
report
https://bugzilla.redhat.com/2222794
-
report
https://bugzilla.redhat.com/2222795
-
advisory
https://errata.almalinux.org/9/ALSA-2023-6667.html