Summary
evolution-mapi
[3.28.3-8]
- Related: #2190417 - Rebuild for samba rebase to 4.18.x
openchange
[2.3-32.0.1]
- Use ldconfig_scriptlets
[2.3-32]
- Related: #2190417 (Rebuild for samba rebase to 4.18.x)
samba
[4.18.6-1]
- related: rhbz#2190417 - Update to version 4.18.6
- resolves: rhbz#2232564 - Fix the rpc dsgetinfo command
[4.18.5-0]
- resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968
[4.18.4-2]
- resolves: rhbz#2222884 - Fix trust relationship between workstation and DC
[4.18.4-1]
- resolves: rhbz#2221594 - Fix broken symlink for libwbclient
- resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with winbind scan trusted domains = yes
- resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/
- resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning
[4.18.4-0]
- resolves: rhbz#2190417 - Update to version 4.18.4
[4.18.3-0]
- resolves: rhbz#2190417 - Update to version 4.18.3
[4.18.2-2]
- resolves: rhbz#2190417 - Rebuild to trigger distrobaker sync
[4.18.2-1]
- resolves: rhbz#2190417 - Add missing tests to fix osci.brew-build.tier0.functional
[4.18.2-0]
- resolves: rhbz#2190417 - Update to version 4.18.2
[4.17.5-2]
- resolves: rhbz#2169339 - Fix winbind memory leak
- resolves: rhbz#2152899 - Fix Samba shares not accessible issue
[4.17.5-1]
- resolves: rhbz#2167691 - Create package samba-tools
[4.17.5-0]
- related: rhbz#2132051 - Update to version 4.17.5
[4.17.4-1]
- related: rhbz#2132051 - Create package dc-libs also for 'non-dc build'
[4.17.4-0]
- related: rhbz#2132051 - Update to version 4.17.4
- resolves: rhbz#2154370 - Fix CVE-2022-38023
- resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum)
- resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory
[4.17.2-2]
- Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
- related: rhbz#2132051
[4.17.2-1]
- resolves: rhbz#2132051 - Update to version 4.17.2
- resolves: rhbz#2126174 - Fix CVE-2022-1615
- resolves: rhbz#2108487 - ctdb: Add dependency to samba-winbind-clients
[4.16.4-2]
- resolves: rhbz#2120956 - Do not require samba package in python3-samba
[4.16.4-1]
- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742
[4.16.3-0]
- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name
[4.16.2-1]
- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout
[4.16.2-0]
- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2
[4.16.1-0]
- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release
[4.15.5-8]
- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls
[4.15.5-7]
- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error
[4.15.5-6]
- resolves: rhbz#2059151 - Fix username map for unix groups
- resolves: rhbz#2065212 - Fix 'create krb5 conf = yes when a KDC has a single IP address.
[4.15.5-4]
- resolves: rhbz#2057503 - Fix winbind kerberos ticket refresh
[4.15.5-3]
- related: rhbz#1979959 - Fix typo in testparm output
[4.15.5-2]
- resolves: rhbz#1979959 - Improve idmap autorid sanity checks and documentation
[4.15.5-1]
- resolves: #1995849 - [RFE] Change change password change prompt phrasing
- resolves: #2029417 - virusfilter_vfs_openat: Not scanned: Directory or special file
[4.15.5-0]
- Update to Samba 4.15.5
- related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
- resolves: rhbz#2046127 - Fix CVE-2021-44141
- resolves: rhbz#2046153 - Fix CVE-2021-44142
- resolves: rhbz#2044404 - Printing no longer works on Windows 7
- resolves: rhbz#2043154 - Fix systemd notifications
- resolves: rhbz#2049602 - Disable NTLMSSP for ldap client connections (e.g. libads)
[4.15.4-0]
- Update to Samba 4.15.4
- related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
- resolves: rhbz#2039153 - Fix CVE-2021-20316
- resolves: rhbz#1912549 - Winexe: Kerberos flag not invoking Kerberos Auth
- resolves: rhbz#2039157 - Fix CVE-2021-43566
- resolves: rhbz#2038148 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7
- resolves: rhbz#2035528 - [smb] Segmentation fault when joining the domain
- resolves: rhbz#2038796 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED
[4.15.3-1]
- related: rhbz#2013596 - Rebase to version 4.15.3
- resolves: rhbz#2028029 - Fix possible null pointer dereference in winbind
- resolves: rhbz#1912549 - Winexe: Kerberos Auth is respected via --use-kerberos=desired
[4.15.2-2]
- related: rhbz#2013596 - Remove unneeded lmdb dependency
[4.15.2-1]
- resolves: rhbz#2013596 - Rebase to version 4.15.2
- resolves: rhbz#1999294 - Remove noisy error message in winbindd
- resolves: rhbz#1958881 - Don't require winbind being online for krb5 auth
with one-way trusts
- resolves: rhbz#2019461 - Fix deleting directories with dangling symlinks
[4.14.5-14]
- related: rbhz#2019674 - Fix CVE-2020-25717
- Fix running ktest (selftest)
[4.14.5-13]
- related: rbhz#2019674 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role
[4.14.5-12]
- related: rbhz#2019674 - Fix regression with 'allow trusted domains = no'
[4.14.5-11]
- resolves: rhbz#2021425 - Add missing PAC buffer types to krb5pac.idl
[4.14.4-3]
- resolves: rhbz#2019662 - Fix CVE-2016-2124
- resolves: rhbz#2019668 - Fix CVE-2021-23192
- resolves: rbhz#2019674 - Fix CVE-2020-25717
[ 4.14.4-2]
- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0
[4.14.4-1]
- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message
[4.14.4-0]
- related: rhbz#1944657 - Update to versio
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | evolution-mapi | 0:3.28.3-8.el8 |
| Oracle Linux · 8 | evolution-mapi-langpacks | 0:3.28.3-8.el8 |
| Oracle Linux · 8 | openchange | 0:2.3-32.0.1.el8 |
Vulnerabilities 4
-
High 7.5CVE-2023-34966 EPSS 62%
Samba: infinite loop in mdssvc rpc service for spotlight
An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not validate a field in the network packet that contains t…
-
Medium 5.9
Samba: out-of-bounds read in winbind auth_crap
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, …
-
Medium 5.3CVE-2023-34967 EPSS 61%
Samba: type confusion in mdssvc rpc service for spotlight
A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the …
-
Medium 5.3
Samba: spotlight server-side share path disclosure
A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a…