Skip to content
OpenAdvisories
Unscored RHSA-2009:1585 4 CVEs

Red Hat Security Advisory: samba3x security and bug fix update

Published Sep 13, 2024 · Updated Nov 13, 2026

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 5 rhel_extras:5::client libsmbclient 0:3.0.34-46.el5
Red Hat · RHEL 5 rhel_extras:5::client libsmbclient-devel 0:3.0.34-46.el5
Red Hat · RHEL 5 rhel_extras:5::client libtalloc 0:1.2.0-46.el5
Red Hat · RHEL 5 rhel_extras:5::client libtalloc-devel 0:1.2.0-46.el5
Red Hat · RHEL 5 rhel_extras:5::client libtdb 0:1.1.2-46.el5
Red Hat · RHEL 5 rhel_extras:5::client libtdb-devel 0:1.1.2-46.el5
Red Hat · RHEL 5 rhel_extras:5::client samba3x 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::client samba3x-client 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::client samba3x-common 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::client samba3x-debuginfo 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::client samba3x-doc 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::client samba3x-domainjoin-gui 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::client samba3x-swat 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::client samba3x-winbind 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::client samba3x-winbind-devel 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::client tdb-tools 0:1.1.2-46.el5
Red Hat · RHEL 5 rhel_extras:5::server libsmbclient 0:3.0.34-46.el5
Red Hat · RHEL 5 rhel_extras:5::server libsmbclient-devel 0:3.0.34-46.el5
Red Hat · RHEL 5 rhel_extras:5::server libtalloc 0:1.2.0-46.el5
Red Hat · RHEL 5 rhel_extras:5::server libtalloc-devel 0:1.2.0-46.el5
Red Hat · RHEL 5 rhel_extras:5::server libtdb 0:1.1.2-46.el5
Red Hat · RHEL 5 rhel_extras:5::server libtdb-devel 0:1.1.2-46.el5
Red Hat · RHEL 5 rhel_extras:5::server samba3x 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::server samba3x-client 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::server samba3x-common 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::server samba3x-debuginfo 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::server samba3x-doc 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::server samba3x-domainjoin-gui 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::server samba3x-swat 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::server samba3x-winbind 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::server samba3x-winbind-devel 0:3.3.8-0.46.el5
Red Hat · RHEL 5 rhel_extras:5::server tdb-tools 0:1.1.2-46.el5

Vulnerabilities 4

  • Unscored —

    The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.1…

  • Unscored —

    Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in…

  • Unscored —

    smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated …

  • Unscored —

    mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is ins…

References

  • article
    http://samba.org/samba/history/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=529022
  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://www.redhat.com/support/policy/soc/production/preview_scope/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=506996
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=523752
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=524551
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526074
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526645
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=528633
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1585.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-1888
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1888
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1888
  • report
    https://access.redhat.com/security/cve/CVE-2009-2813
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2813
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2813
  • report
    https://access.redhat.com/security/cve/CVE-2009-2906
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2906
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2906
  • report
    https://access.redhat.com/security/cve/CVE-2009-2948
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2948
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2948