Moderate: samba security and bug fix update

2023-07-3100:00:00

errata.almalinux.org

samba

smb protocol

security fix

bug fix

protocol

file sharing

printers

server message block

cifs

packet signing

cve

cvss score

bz#2223600

information security

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

38.2%

JSON

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

samba: SMB2 packet signing is not enforced when “server signing = required” is set (CVE-2023-3347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

The trust relationship between this workstation and the primary domain failed (BZ#2223600)

OSVersionArchitecturePackageVersionFilename
almalinux9x86_64samba-winexe< 4.17.5-103.el9_2.almasamba-winexe-4.17.5-103.el9_2.alma.x86_64.rpm
almalinux9x86_64samba-winbind-krb5-locator< 4.17.5-103.el9_2.almasamba-winbind-krb5-locator-4.17.5-103.el9_2.alma.x86_64.rpm
almalinux9x86_64samba-vfs-iouring< 4.17.5-103.el9_2.almasamba-vfs-iouring-4.17.5-103.el9_2.alma.x86_64.rpm
almalinux9x86_64samba-krb5-printing< 4.17.5-103.el9_2.almasamba-krb5-printing-4.17.5-103.el9_2.alma.x86_64.rpm
almalinux9x86_64samba-winbind-clients< 4.17.5-103.el9_2.almasamba-winbind-clients-4.17.5-103.el9_2.alma.x86_64.rpm
almalinux9x86_64samba-client< 4.17.5-103.el9_2.almasamba-client-4.17.5-103.el9_2.alma.x86_64.rpm
almalinux9aarch64samba-winbind-krb5-locator< 4.17.5-103.el9_2.almasamba-winbind-krb5-locator-4.17.5-103.el9_2.alma.aarch64.rpm
almalinux9aarch64samba-winbind-clients< 4.17.5-103.el9_2.almasamba-winbind-clients-4.17.5-103.el9_2.alma.aarch64.rpm
almalinux9aarch64samba-krb5-printing< 4.17.5-103.el9_2.almasamba-krb5-printing-4.17.5-103.el9_2.alma.aarch64.rpm
almalinux9aarch64samba-client< 4.17.5-103.el9_2.almasamba-client-4.17.5-103.el9_2.alma.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	x86_64	samba-winexe	< 4.17.5-103.el9_2.alma	samba-winexe-4.17.5-103.el9_2.alma.x86_64.rpm
almalinux	9	x86_64	samba-winbind-krb5-locator	< 4.17.5-103.el9_2.alma	samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.x86_64.rpm
almalinux	9	x86_64	samba-vfs-iouring	< 4.17.5-103.el9_2.alma	samba-vfs-iouring-4.17.5-103.el9_2.alma.x86_64.rpm
almalinux	9	x86_64	samba-krb5-printing	< 4.17.5-103.el9_2.alma	samba-krb5-printing-4.17.5-103.el9_2.alma.x86_64.rpm
almalinux	9	x86_64	samba-winbind-clients	< 4.17.5-103.el9_2.alma	samba-winbind-clients-4.17.5-103.el9_2.alma.x86_64.rpm
almalinux	9	x86_64	samba-client	< 4.17.5-103.el9_2.alma	samba-client-4.17.5-103.el9_2.alma.x86_64.rpm
almalinux	9	aarch64	samba-winbind-krb5-locator	< 4.17.5-103.el9_2.alma	samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.aarch64.rpm
almalinux	9	aarch64	samba-winbind-clients	< 4.17.5-103.el9_2.alma	samba-winbind-clients-4.17.5-103.el9_2.alma.aarch64.rpm
almalinux	9	aarch64	samba-krb5-printing	< 4.17.5-103.el9_2.alma	samba-krb5-printing-4.17.5-103.el9_2.alma.aarch64.rpm
almalinux	9	aarch64	samba-client	< 4.17.5-103.el9_2.alma	samba-client-4.17.5-103.el9_2.alma.aarch64.rpm