Summary
[4.10.17-9]
- related: #1853272 - Add back missing patch hunks
[4.10.16-8]
- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
pam_winbind{.conf} manpage
Fixed packages 27
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ctdb | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | ctdb-tests | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | libsmbclient | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | libsmbclient-devel | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | libwbclient | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | libwbclient-devel | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-client | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-client-libs | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-common | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-common-libs | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-common-tools | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-dc | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-dc-libs | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-devel | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-krb5-printing | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-libs | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-pidl | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-python | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-python-test | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-test | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-test-libs | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-vfs-glusterfs | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-winbind | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-winbind-clients | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-winbind-krb5-locator | 0:4.10.16-9.el7_9 |
| Oracle Linux · 7 | samba-winbind-modules | 0:4.10.16-9.el7_9 |
Vulnerabilities 3
-
Medium 5.5
Netlogon Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…
KEV Nov 3, 2021 -
Medium 5.5
A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and befo…
-
Medium 4.3
A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to …