FEDORA-2023-7eb8cbf1a5 — security update for samba

stable

samba-4.18.8-1.fc38

FEDORA-2023-7eb8cbf1a5 created by gd 2 years ago for Fedora 38

Update to version 4.18.8 - Security fixes for CVE-2023-3961, CVE-2023-4091, CVE-2023-4154, CVE-2023-42669 and CVE-2023-42670

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-7eb8cbf1a5

This update has been submitted for testing by gd.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

gd edited this update.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

imabug provided feedback 2 years ago

karma

This update has been pushed to testing.

2 years ago

besser82 commented & provided feedback 2 years ago

karma

Works great! LGTM! =)

This update can be pushed to stable now if the maintainer wishes

2 years ago

This update has been submitted for stable by gd.

2 years ago

This update has been pushed to stable.

2 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

modified

2 years ago

Builds

samba-4.18.8-1.fc38

BZ#2241881 CVE-2023-3961 samba: smbd allows client access to unix domain sockets on the file system as root

BZ#2241882 CVE-2023-4091 samba: SMB clients can truncate files with read-only permissions

BZ#2241883 CVE-2023-4154 samba: AD DC password exposure to privileged users and RODCs

BZ#2241884 CVE-2023-42669 samba: "rpcecho" development server allows denial of service via sleep() call on AD DC

BZ#2241885 CVE-2023-42670 samba: AD DC Busy RPC multiple listener DoS

BZ#2243228 CVE-2023-3961 samba: smbd allows client access to unix domain sockets on the file system as root [fedora-all]

BZ#2243229 CVE-2023-42669 samba: "rpcecho" development server allows denial of service via sleep() call on AD DC [fedora-all]

BZ#2243230 CVE-2023-4154 samba: AD DC password exposure to privileged users and RODCs [fedora-all]

BZ#2243231 CVE-2023-4091 samba: SMB clients can truncate files with read-only permissions [fedora-all]

BZ#2243232 CVE-2023-42670 samba: AD DC Busy RPC multiple listener DoS [fedora-all]

samba-4.18.8-1.fc38

Automated Test Results

passed

Test Cases


0	0	Test Case desktop network smb