Security
Headlines
HeadlinesLatestCVEs

Headline

Red Hat Security Advisory 2023-2137-01

Red Hat Security Advisory 2023-2137-01 - Samba is an open-source implementation of the Server Message Block protocol and the related Common Internet File System protocol, which allow PC-compatible machines to share files, printers, and various information.

Packet Storm
#vulnerability#mac#linux#red_hat#samba

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
Red Hat Security Advisory

Synopsis: Important: samba security update
Advisory ID: RHSA-2023:2137-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2023:2137
Issue date: 2023-05-04
CVE Names: CVE-2022-38023
=====================================================================

  1. Summary:

An update for samba is now available for Red Hat Enterprise Linux 9.0
Extended Update Support.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

  1. Relevant releases/architectures:

Red Hat CodeReady Linux Builder EUS (v.9.0) - aarch64, noarch, ppc64le, s390x, x86_64
Red Hat Enterprise Linux AppStream EUS (v.9.0) - aarch64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux BaseOS EUS (v.9.0) - aarch64, noarch, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Resilient Storage EUS (v.9.0) - ppc64le, s390x, x86_64

  1. Description:

Samba is an open-source implementation of the Server Message Block (SMB)
protocol and the related Common Internet File System (CIFS) protocol, which
allow PC-compatible machines to share files, printers, and various
information.

Security Fix(es):

  • samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided
    (CVE-2022-38023)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

  1. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the smb service will be restarted
automatically.

  1. Bugs fixed (https://bugzilla.redhat.com/):

2154362 - CVE-2022-38023 samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided

  1. Package List:

Red Hat Enterprise Linux AppStream EUS (v.9.0):

aarch64:
ctdb-debuginfo-4.15.5-110.el9_0.aarch64.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.aarch64.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.aarch64.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-client-4.15.5-110.el9_0.aarch64.rpm
samba-client-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-debugsource-4.15.5-110.el9_0.aarch64.rpm
samba-krb5-printing-4.15.5-110.el9_0.aarch64.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-test-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-vfs-iouring-4.15.5-110.el9_0.aarch64.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-clients-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-krb5-locator-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.aarch64.rpm

ppc64le:
ctdb-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-client-4.15.5-110.el9_0.ppc64le.rpm
samba-client-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-debugsource-4.15.5-110.el9_0.ppc64le.rpm
samba-krb5-printing-4.15.5-110.el9_0.ppc64le.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-test-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-vfs-iouring-4.15.5-110.el9_0.ppc64le.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-clients-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-krb5-locator-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.ppc64le.rpm

s390x:
ctdb-debuginfo-4.15.5-110.el9_0.s390x.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.s390x.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.s390x.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-client-4.15.5-110.el9_0.s390x.rpm
samba-client-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-debugsource-4.15.5-110.el9_0.s390x.rpm
samba-krb5-printing-4.15.5-110.el9_0.s390x.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-test-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-vfs-iouring-4.15.5-110.el9_0.s390x.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-clients-4.15.5-110.el9_0.s390x.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-krb5-locator-4.15.5-110.el9_0.s390x.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.s390x.rpm

x86_64:
ctdb-debuginfo-4.15.5-110.el9_0.x86_64.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.x86_64.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.x86_64.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-client-4.15.5-110.el9_0.x86_64.rpm
samba-client-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-debugsource-4.15.5-110.el9_0.x86_64.rpm
samba-krb5-printing-4.15.5-110.el9_0.x86_64.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-test-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-vfs-iouring-4.15.5-110.el9_0.x86_64.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-clients-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-krb5-locator-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winexe-4.15.5-110.el9_0.x86_64.rpm
samba-winexe-debuginfo-4.15.5-110.el9_0.x86_64.rpm

Red Hat Enterprise Linux BaseOS EUS (v.9.0):

Source:
samba-4.15.5-110.el9_0.src.rpm

aarch64:
ctdb-debuginfo-4.15.5-110.el9_0.aarch64.rpm
libsmbclient-4.15.5-110.el9_0.aarch64.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.aarch64.rpm
libwbclient-4.15.5-110.el9_0.aarch64.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.aarch64.rpm
python3-samba-4.15.5-110.el9_0.aarch64.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-4.15.5-110.el9_0.aarch64.rpm
samba-client-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-client-libs-4.15.5-110.el9_0.aarch64.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-common-libs-4.15.5-110.el9_0.aarch64.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-common-tools-4.15.5-110.el9_0.aarch64.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-debugsource-4.15.5-110.el9_0.aarch64.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-libs-4.15.5-110.el9_0.aarch64.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-test-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-modules-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.aarch64.rpm

noarch:
samba-common-4.15.5-110.el9_0.noarch.rpm

ppc64le:
ctdb-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
libsmbclient-4.15.5-110.el9_0.ppc64le.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
libwbclient-4.15.5-110.el9_0.ppc64le.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
python3-samba-4.15.5-110.el9_0.ppc64le.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-4.15.5-110.el9_0.ppc64le.rpm
samba-client-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-client-libs-4.15.5-110.el9_0.ppc64le.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-common-libs-4.15.5-110.el9_0.ppc64le.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-common-tools-4.15.5-110.el9_0.ppc64le.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-debugsource-4.15.5-110.el9_0.ppc64le.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-libs-4.15.5-110.el9_0.ppc64le.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-test-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-modules-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.ppc64le.rpm

s390x:
ctdb-debuginfo-4.15.5-110.el9_0.s390x.rpm
libsmbclient-4.15.5-110.el9_0.s390x.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.s390x.rpm
libwbclient-4.15.5-110.el9_0.s390x.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.s390x.rpm
python3-samba-4.15.5-110.el9_0.s390x.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-4.15.5-110.el9_0.s390x.rpm
samba-client-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-client-libs-4.15.5-110.el9_0.s390x.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-common-libs-4.15.5-110.el9_0.s390x.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-common-tools-4.15.5-110.el9_0.s390x.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-debugsource-4.15.5-110.el9_0.s390x.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-libs-4.15.5-110.el9_0.s390x.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-test-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-4.15.5-110.el9_0.s390x.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-modules-4.15.5-110.el9_0.s390x.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.s390x.rpm

x86_64:
ctdb-debuginfo-4.15.5-110.el9_0.i686.rpm
ctdb-debuginfo-4.15.5-110.el9_0.x86_64.rpm
libsmbclient-4.15.5-110.el9_0.i686.rpm
libsmbclient-4.15.5-110.el9_0.x86_64.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.i686.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.x86_64.rpm
libwbclient-4.15.5-110.el9_0.i686.rpm
libwbclient-4.15.5-110.el9_0.x86_64.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.i686.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.x86_64.rpm
python3-samba-4.15.5-110.el9_0.i686.rpm
python3-samba-4.15.5-110.el9_0.x86_64.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.i686.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-4.15.5-110.el9_0.x86_64.rpm
samba-client-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-client-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-client-libs-4.15.5-110.el9_0.i686.rpm
samba-client-libs-4.15.5-110.el9_0.x86_64.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-common-libs-4.15.5-110.el9_0.x86_64.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-common-tools-4.15.5-110.el9_0.x86_64.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-debugsource-4.15.5-110.el9_0.i686.rpm
samba-debugsource-4.15.5-110.el9_0.x86_64.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-libs-4.15.5-110.el9_0.i686.rpm
samba-libs-4.15.5-110.el9_0.x86_64.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-test-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-test-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-modules-4.15.5-110.el9_0.i686.rpm
samba-winbind-modules-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winexe-debuginfo-4.15.5-110.el9_0.x86_64.rpm

Red Hat CodeReady Linux Builder EUS (v.9.0):

aarch64:
ctdb-debuginfo-4.15.5-110.el9_0.aarch64.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.aarch64.rpm
libsmbclient-devel-4.15.5-110.el9_0.aarch64.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.aarch64.rpm
libwbclient-devel-4.15.5-110.el9_0.aarch64.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-client-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-debugsource-4.15.5-110.el9_0.aarch64.rpm
samba-devel-4.15.5-110.el9_0.aarch64.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-test-4.15.5-110.el9_0.aarch64.rpm
samba-test-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-test-libs-4.15.5-110.el9_0.aarch64.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.aarch64.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.aarch64.rpm

noarch:
samba-pidl-4.15.5-110.el9_0.noarch.rpm

ppc64le:
ctdb-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
libsmbclient-devel-4.15.5-110.el9_0.ppc64le.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
libwbclient-devel-4.15.5-110.el9_0.ppc64le.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-client-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-debugsource-4.15.5-110.el9_0.ppc64le.rpm
samba-devel-4.15.5-110.el9_0.ppc64le.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-test-4.15.5-110.el9_0.ppc64le.rpm
samba-test-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-test-libs-4.15.5-110.el9_0.ppc64le.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.ppc64le.rpm

s390x:
ctdb-debuginfo-4.15.5-110.el9_0.s390x.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.s390x.rpm
libsmbclient-devel-4.15.5-110.el9_0.s390x.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.s390x.rpm
libwbclient-devel-4.15.5-110.el9_0.s390x.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-client-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-debugsource-4.15.5-110.el9_0.s390x.rpm
samba-devel-4.15.5-110.el9_0.s390x.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-test-4.15.5-110.el9_0.s390x.rpm
samba-test-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-test-libs-4.15.5-110.el9_0.s390x.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.s390x.rpm

x86_64:
ctdb-debuginfo-4.15.5-110.el9_0.i686.rpm
ctdb-debuginfo-4.15.5-110.el9_0.x86_64.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.i686.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.x86_64.rpm
libsmbclient-devel-4.15.5-110.el9_0.i686.rpm
libsmbclient-devel-4.15.5-110.el9_0.x86_64.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.i686.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.x86_64.rpm
libwbclient-devel-4.15.5-110.el9_0.i686.rpm
libwbclient-devel-4.15.5-110.el9_0.x86_64.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.i686.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-client-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-client-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-debugsource-4.15.5-110.el9_0.i686.rpm
samba-debugsource-4.15.5-110.el9_0.x86_64.rpm
samba-devel-4.15.5-110.el9_0.i686.rpm
samba-devel-4.15.5-110.el9_0.x86_64.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-test-4.15.5-110.el9_0.x86_64.rpm
samba-test-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-test-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-test-libs-4.15.5-110.el9_0.x86_64.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.i686.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winexe-debuginfo-4.15.5-110.el9_0.x86_64.rpm

Red Hat Enterprise Linux Resilient Storage EUS (v.9.0):

ppc64le:
ctdb-4.15.5-110.el9_0.ppc64le.rpm
ctdb-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-client-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-debugsource-4.15.5-110.el9_0.ppc64le.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-test-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.ppc64le.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.ppc64le.rpm

s390x:
ctdb-4.15.5-110.el9_0.s390x.rpm
ctdb-debuginfo-4.15.5-110.el9_0.s390x.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.s390x.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.s390x.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-client-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-debugsource-4.15.5-110.el9_0.s390x.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-test-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.s390x.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.s390x.rpm

x86_64:
ctdb-4.15.5-110.el9_0.x86_64.rpm
ctdb-debuginfo-4.15.5-110.el9_0.x86_64.rpm
libsmbclient-debuginfo-4.15.5-110.el9_0.x86_64.rpm
libwbclient-debuginfo-4.15.5-110.el9_0.x86_64.rpm
python3-samba-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-client-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-client-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-common-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-common-tools-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-debugsource-4.15.5-110.el9_0.x86_64.rpm
samba-krb5-printing-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-test-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-test-libs-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-vfs-iouring-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-clients-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-krb5-locator-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winbind-modules-debuginfo-4.15.5-110.el9_0.x86_64.rpm
samba-winexe-debuginfo-4.15.5-110.el9_0.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

  1. References:

https://access.redhat.com/security/cve/CVE-2022-38023
https://access.redhat.com/security/updates/classification/#important

  1. Contact:

The Red Hat security contact is [email protected]. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2023 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=ERA9
-----END PGP SIGNATURE-----

RHSA-announce mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/rhsa-announce

Related news

Gentoo Linux Security Advisory 202309-06

Gentoo Linux Security Advisory 202309-6 - Multiple vulnerabilities have been discovered in Samba, the worst of which could result in root remote code execution. Versions greater than or equal to 4.18.4 are affected.

RHSA-2023:3491: Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update

An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-3564: A use-after-free flaw was found in the Linux kernel’s L2CAP bluetooth functionality in how a user triggers a race condition by two malicious flows in the L2CAP bluetooth packets. This flaw allows a local or bluetooth connection user to crash the system or poten...

CVE-2023-23694: DSA-2023-071: Dell VxRail Security Update for Multiple Third-Party Component Vulnerabilities – 7.0.450

Dell VxRail versions earlier than 7.0.450, contain(s) an OS command injection vulnerability in VxRail Manager. A local authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.

RHSA-2023:1326: Red Hat Security Advisory: OpenShift Container Platform 4.13.0 security update

Red Hat OpenShift Container Platform release 4.13.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-4235: A flaw was found in go-yaml. This issue occurs due to unbounded alias chasing, where a maliciously crafted YAML file can cause the system to consume significant system resources. If p...

Ubuntu Security Notice USN-5936-1

Ubuntu Security Notice 5936-1 - Evgeny Legerov discovered that Samba incorrectly handled buffers in certain GSSAPI routines of Heimdal. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. Tom Tervoort discovered that Samba incorrectly used weak rc4-hmac Kerberos keys. A remote attacker could possibly use this issue to elevate privileges.

Red Hat Security Advisory 2023-1090-01

Red Hat Security Advisory 2023-1090-01 - Samba is an open-source implementation of the Server Message Block protocol and the related Common Internet File System protocol, which allow PC-compatible machines to share files, printers, and various information.

Red Hat Security Advisory 2023-0838-01

Red Hat Security Advisory 2023-0838-01 - Samba is an open-source implementation of the Server Message Block protocol and the related Common Internet File System protocol, which allow PC-compatible machines to share files, printers, and various information.

RHSA-2023:0838: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-38023: A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between the samba client and server to craft data with the s...

Red Hat Security Advisory 2023-0639-01

Red Hat Security Advisory 2023-0639-01 - Samba is an open-source implementation of the Server Message Block protocol and the related Common Internet File System protocol, which allow PC-compatible machines to share files, printers, and various information.

RHSA-2023:0638: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-38023: A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern e...

RHSA-2023:0639: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-38023: A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between the samba client...

RHSA-2023:0637: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-38023: A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between the samba client and serve...

Ubuntu Security Notice USN-5822-1

Ubuntu Security Notice 5822-1 - It was discovered that Samba incorrectly handled the bad password count logic. A remote attacker could possibly use this issue to bypass bad passwords lockouts. This issue was only addressed in Ubuntu 22.10. Evgeny Legerov discovered that Samba incorrectly handled buffers in certain GSSAPI routines of Heimdal. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service.

CVE-2022-38023

Netlogon RPC Elevation of Privilege Vulnerability.

CVE-2022-38023

Netlogon RPC Elevation of Privilege Vulnerability

Packet Storm: Latest News

Microsoft Windows TOCTOU Local Privilege Escalation