Skip to content
OpenAdvisories
Medium ELSA-2023-7139 4 CVEs

Moderate: samba security, bug fix, and enhancement update (Oracle Linux 8)

Published Nov 18, 2023 · Updated Nov 18, 2023

Summary

evolution-mapi
[3.28.3-8]
- Related: #2190417 - Rebuild for samba rebase to 4.18.x

openchange
[2.3-32.0.1]
- Use ldconfig_scriptlets

[2.3-32]
- Related: #2190417 (Rebuild for samba rebase to 4.18.x)

samba
[4.18.6-1]
- related: rhbz#2190417 - Update to version 4.18.6
- resolves: rhbz#2232564 - Fix the rpc dsgetinfo command

[4.18.5-0]
- resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968

[4.18.4-2]
- resolves: rhbz#2222884 - Fix trust relationship between workstation and DC

[4.18.4-1]
- resolves: rhbz#2221594 - Fix broken symlink for libwbclient
- resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with winbind scan trusted domains = yes
- resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/
- resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning

[4.18.4-0]
- resolves: rhbz#2190417 - Update to version 4.18.4

[4.18.3-0]
- resolves: rhbz#2190417 - Update to version 4.18.3

[4.18.2-2]
- resolves: rhbz#2190417 - Rebuild to trigger distrobaker sync

[4.18.2-1]
- resolves: rhbz#2190417 - Add missing tests to fix osci.brew-build.tier0.functional

[4.18.2-0]
- resolves: rhbz#2190417 - Update to version 4.18.2

[4.17.5-2]
- resolves: rhbz#2169339 - Fix winbind memory leak
- resolves: rhbz#2152899 - Fix Samba shares not accessible issue

[4.17.5-1]
- resolves: rhbz#2167691 - Create package samba-tools

[4.17.5-0]
- related: rhbz#2132051 - Update to version 4.17.5

[4.17.4-1]
- related: rhbz#2132051 - Create package dc-libs also for 'non-dc build'

[4.17.4-0]
- related: rhbz#2132051 - Update to version 4.17.4
- resolves: rhbz#2154370 - Fix CVE-2022-38023
- resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum)
- resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory

[4.17.2-2]
- Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
- related: rhbz#2132051

[4.17.2-1]
- resolves: rhbz#2132051 - Update to version 4.17.2
- resolves: rhbz#2126174 - Fix CVE-2022-1615
- resolves: rhbz#2108487 - ctdb: Add dependency to samba-winbind-clients

[4.16.4-2]
- resolves: rhbz#2120956 - Do not require samba package in python3-samba

[4.16.4-1]
- Rebase to version 4.16.4
- resolves: rhbz#2108331 - Fix CVE-2022-32742

[4.16.3-0]
- related: rhbz#2077468 - Rebase Samba to 4.16.3
- resolves: rhbz#2106672 - The pcap background queue process should not be stopped
- resolves: rhbz#2106263 - Fix crash in rpcd_classic
- resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name

[4.16.2-1]
- resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout

[4.16.2-0]
- Fix rpminspect abidiff
- related: rhbz#2077468 - Rebase Samba to 4.16.2

[4.16.1-0]
- Update to Samba 4.16.1
- resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release

[4.15.5-8]
- resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls

[4.15.5-7]
- resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error

[4.15.5-6]
- resolves: rhbz#2059151 - Fix username map for unix groups
- resolves: rhbz#2065212 - Fix 'create krb5 conf = yes when a KDC has a single IP address.

[4.15.5-4]
- resolves: rhbz#2057503 - Fix winbind kerberos ticket refresh

[4.15.5-3]
- related: rhbz#1979959 - Fix typo in testparm output

[4.15.5-2]
- resolves: rhbz#1979959 - Improve idmap autorid sanity checks and documentation

[4.15.5-1]
- resolves: #1995849 - [RFE] Change change password change prompt phrasing
- resolves: #2029417 - virusfilter_vfs_openat: Not scanned: Directory or special file

[4.15.5-0]
- Update to Samba 4.15.5
- related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
- resolves: rhbz#2046127 - Fix CVE-2021-44141
- resolves: rhbz#2046153 - Fix CVE-2021-44142
- resolves: rhbz#2044404 - Printing no longer works on Windows 7
- resolves: rhbz#2043154 - Fix systemd notifications
- resolves: rhbz#2049602 - Disable NTLMSSP for ldap client connections (e.g. libads)

[4.15.4-0]
- Update to Samba 4.15.4
- related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
- resolves: rhbz#2039153 - Fix CVE-2021-20316
- resolves: rhbz#1912549 - Winexe: Kerberos flag not invoking Kerberos Auth
- resolves: rhbz#2039157 - Fix CVE-2021-43566
- resolves: rhbz#2038148 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7
- resolves: rhbz#2035528 - [smb] Segmentation fault when joining the domain
- resolves: rhbz#2038796 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED

[4.15.3-1]
- related: rhbz#2013596 - Rebase to version 4.15.3
- resolves: rhbz#2028029 - Fix possible null pointer dereference in winbind
- resolves: rhbz#1912549 - Winexe: Kerberos Auth is respected via --use-kerberos=desired

[4.15.2-2]
- related: rhbz#2013596 - Remove unneeded lmdb dependency

[4.15.2-1]
- resolves: rhbz#2013596 - Rebase to version 4.15.2
- resolves: rhbz#1999294 - Remove noisy error message in winbindd
- resolves: rhbz#1958881 - Don't require winbind being online for krb5 auth
with one-way trusts
- resolves: rhbz#2019461 - Fix deleting directories with dangling symlinks

[4.14.5-14]
- related: rbhz#2019674 - Fix CVE-2020-25717
- Fix running ktest (selftest)

[4.14.5-13]
- related: rbhz#2019674 - Fix CVE-2020-25717
- Add missing checks for IPA DC server role

[4.14.5-12]
- related: rbhz#2019674 - Fix regression with 'allow trusted domains = no'

[4.14.5-11]
- resolves: rhbz#2021425 - Add missing PAC buffer types to krb5pac.idl

[4.14.4-3]
- resolves: rhbz#2019662 - Fix CVE-2016-2124
- resolves: rhbz#2019668 - Fix CVE-2021-23192
- resolves: rbhz#2019674 - Fix CVE-2020-25717

[ 4.14.4-2]
- related: rhbz#1980346 - Rebuild for libtalloc 0.11.0

[4.14.4-1]
- resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
- resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message

[4.14.4-0]
- related: rhbz#1944657 - Update to versio

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 evolution-mapi 0:3.28.3-8.el8
Oracle Linux · 8 evolution-mapi-langpacks 0:3.28.3-8.el8
Oracle Linux · 8 openchange 0:2.3-32.0.1.el8

Vulnerabilities 4