FEDORA-2023-99444e494b — security update for samba

obsolete

samba-4.19.1-1.fc39

FEDORA-2023-99444e494b created by gd a year ago for Fedora 39

Update to version 4.19.1 - Security fixes for CVE-2023-3961, CVE-2023-4091, CVE-2023-4154, CVE-2023-42669 and CVE-2023-42670

This update has been submitted for testing by gd.

a year ago

This update's test gating status has been changed to 'waiting'.

a year ago

This update's test gating status has been changed to 'passed'.

a year ago

This update has been pushed to testing.

a year ago

nixuser commented & provided feedback a year ago

karma

This is working for me at both the server and client side.

geraldosimiao provided feedback a year ago

karma

This update can be pushed to stable now if the maintainer wishes

a year ago

kparal commented & provided feedback a year ago

karma

I can connect to my samba shares in Nautilus

This update has been submitted for stable by bodhi.

There is an ongoing freeze; this will be pushed to stable after the freeze is over.

a year ago

This update has been obsoleted by samba-4.19.2-1.fc39.

a year ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Thresholds

Minimum Karma

Minimum Testing

14 days

Dates

submitted

a year ago

in testing

a year ago

approved

a year ago

Builds

samba-4.19.1-1.fc39

BZ#2241881 CVE-2023-3961 samba: smbd allows client access to unix domain sockets on the file system as root

BZ#2241882 CVE-2023-4091 samba: SMB clients can truncate files with read-only permissions

BZ#2241883 CVE-2023-4154 samba: AD DC password exposure to privileged users and RODCs

BZ#2241884 CVE-2023-42669 samba: "rpcecho" development server allows denial of service via sleep() call on AD DC

BZ#2241885 CVE-2023-42670 samba: AD DC Busy RPC multiple listener DoS

BZ#2243073 samba-4.19.1 is available

BZ#2243228 CVE-2023-3961 samba: smbd allows client access to unix domain sockets on the file system as root [fedora-all]

BZ#2243229 CVE-2023-42669 samba: "rpcecho" development server allows denial of service via sleep() call on AD DC [fedora-all]

BZ#2243230 CVE-2023-4154 samba: AD DC password exposure to privileged users and RODCs [fedora-all]

BZ#2243231 CVE-2023-4091 samba: SMB clients can truncate files with read-only permissions [fedora-all]

BZ#2243232 CVE-2023-42670 samba: AD DC Busy RPC multiple listener DoS [fedora-all]

samba-4.19.1-1.fc39

Automated Test Results

passed

Test Cases


0	0	Test Case desktop network smb