Summary
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.
The following packages have been upgraded to a later upstream version: samba (4.13.3). (BZ#1878109)
Security Fix(es):
* samba: Netlogon elevation of privilege vulnerability (Zerologon) (CVE-2020-1472)
* samba: Missing handle permissions check in SMB1/2/3 ChangeNotify (CVE-2020-14318)
* samba: Unprivileged user can crash winbind (CVE-2020-14323)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | openchange | 0:2.3-27.el8 |
| Rocky Linux · 8 | samba | 0:4.13.3-3.el8 |
Vulnerabilities 3
-
Medium 5.5
Netlogon Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…
KEV Nov 3, 2021 -
Medium 5.5
A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and befo…
-
Medium 4.3
A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to …
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1818038
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1869702
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1872833
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1878109
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1879822
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1888990
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1891685
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1892631
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1896736
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1898866
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1902198
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1904174
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1924571
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1924615