{"cves":["CVE-2023-34967","CVE-2023-34968","CVE-2023-34966","CVE-2022-2127"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"evolution-mapi\n[3.40.1-6]\n- Related: #2190415 (Rebuild against samba 4.18)\n\nopenchange\n[2.3-41]\n- Related: #2190415 (Rebuild against samba 4.18)\n\nsamba\n[4.18.6-100]\n- related: rhbz#2190415 - Update to version 4.18.6\n- resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command\n\n[4.18.5-100]\n- resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968\n\n[4.18.4-102]\n- resolves: rhbz#2222883 - Fix trust relationship between workstation and DC\n\n[4.18.4-101]\n- resolves: rhbz#2216712 - Fix broken symlink for libwbclient\n- resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with winbind scan trusted domains = yes\n- resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/\n- resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning\n\n[4.18.4-100]\n- resolves: rhbz#2190415 - Update to version 4.18.4\n\n[4.18.3-100]\n- resolves: rhbz#2190415 - Update to version 4.18.3\n\n[4.18.2-101]\n- resolves: rhbz#2187313 - Fix weak dependencies in BaseOS\n\n[4.18.2-100]\n- resolves: rhbz#2190415 - Update to version 4.18.2\n\n[4.17.5-104]\n- related: rhbz#2182163 - Rebuild for liburing rebase to version 2.3\n\n[4.17.5-102]\n- resolves: rhbz#2169980 - Fix winbind memory leak\n- resolves: rhbz#2156056 - Fix Samba shares not accessible issue\n\n[4.17.5-101]\n- resolves: rhbz#2168534 - Create package samba-tools\n\n[4.17.5-100]\n- related: rhbz#2131993 - Update to version 4.17.5\n\n[4.17.4-102]\n- related: rhbz#2131993 - Create package dc-libs also for 'non-dc build'\n\n[4.17.4-101]\n- related: rhbz#2131993 - Rebuild for MIT Kerberos 1.20.1\n\n[4.17.4-100]\n- related: rhbz#2131993 - Update to version 4.17.4\n- resolves: rhbz#2154373 - Fix CVE-2022-38023\n- resolves: rhbz#2143196 - Fix %U include directive for share listing (netshareenum)\n- resolves: rhbz#2114884 - Fix id command to return new groups after successful user login\n- resolves: rhbz#2154885 - Fix Winbind to retrieve user groups from Active Directory\n\n[4.17.2-103]\n- Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional\n- related: rhbz#2131993\n\n[4.17.2-102]\n- Fix CVE-2022-1615 GnuTLS gnutls_rnd() can fail and give predictable random values\n- resolves: rhbz#2126175\n\n[4.17.2-101]\n- resolves: rhbz#2131993 - Update to version 4.17.2\n\n[4.16.4-101]\n- resolves: rhbz#2121317 - Do not require samba package in python3-samba\n\n[4.16.4-100]\n- Rebase to version 4.16.4\n- resolves: rhbz#2108332 - Fix CVE-2022-32742\n\n[ 4.16.3-101]\n- related: rhbz#2077487 - Rebase Samba to 4.16.3\n- resolves: rhbz#2097655 - The pcap background queue process should not be stopped\n- resolves: rhbz#2100105 - Fix net ads info LDAP server and LDAP server name\n\n[4.16.2-102]\n- resolves: rhbz#2106279 - Fix crash in rpcd_classic\n\n[4.16.2-101]\n- resolves: rhbz#2093833 - Fix weak dependency on logrotate\n- resolves: rhbz#2096813 - Fix printer displays only after 300 seconds timeout\n\n[4.16.2-100]\n- Fix rpminspect abidiff\n- related: rhbz#2077487 - Rebase Samba to 4.16.2\n\n[4.16.1-100]\n- resolves: rhbz#2077487 - Rebase Samba to the the latest 4.16.x release\n\n[4.15.5-108]\n- resolves: rhbz#2078838 - Fix UPNs handling in lookup_name*() calls\n\n[4.15.5-106]\n- resolves: rhbz#2065376 - Fix 'create krb5 conf = yes when a KDC has a single IP address.\n- resolves: rhbz#2076504 - PAM Kerberos authentication fails with a clock skew error\n\n[4.15.5-105]\n- resolves: rhbz#2074891 - Fix username map for unix groups\n\n[4.15.5-104]\n- resolves: rhbz#2057500 - Fix winbind kerberos ticket refresh\n\n[4.15.5-103]\n- related: rhbz#2044231 - Fix typo in testparm output\n\n[4.15.5-102]\n- resolves: rhbz#2044231 - Improve idmap autorid sanity checks and documentation\n\n[4.15.5-101]\n- resolves: #2050111 - [RFE] Change change password change prompt phrasing\n- resolves: #2054110 - virusfilter_vfs_openat: Not scanned: Directory or special file\n\n[4.15.5-100]\n- related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release\n- resolves: #2046129 - Fix CVE-2021-44141\n- resolves: #2046154 - Fix CVE-2021-44142\n- resolves: #2044405 - Fix printing no longer works on Windows 7\n- resolves: #2049485 - Fix systemd notifications\n- resolves: #2049604 - Disable NTLMSSP for ldap client connections\n\n[4.15.4-100]\n- related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release\n- resolves: #2039154 - Fix CVE-2021-20316\n- resolves: #2044238 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7x\n- resolves: #2044239 - [smb] Segmentation fault when joining the domain\n- resolves: #2044241 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED\n- resolves: #2044255 - Fix CVE-2021-43566\n\n[4.15.3-1]\n- related: rhbz#2013578 - Rebase to Samba 4.15.3\n- resolves: rhbz#2028026 - Fix possible null pointer dereference in winbind\n- resolves: rhbz#2033317 - Winexe: Kerberos Auth is respected via --use-kerberos=desired\n\n[4.15.2-3]\n- related: rhbz#2013578 - Remove unneeded lmdb dependency\n\n[4.15.2-2]\n- resolves: rhbz#2019675 - Fix CVE-2020-25717\n\n[4.15.2-2]\n- resolves: rhbz#2019669 - Fix CVE-2021-23192\n\n[4.15.2-2]\n- resolves: rhbz#2019663 - Fix CVE-2016-2124\n\n[4.15.2-1]\n- resolves: rhbz#2013578 - Rebase to Samba 4.15.2\n\n[4.14.5-103]\n- resolves: rhbz#1980356 - Fix winbind restart on package upgrade","id":"ELSA-2023-6667","ovalId":"oval:com.oracle.elsa:def:20236667","source":"oracle_linux","title":"ELSA-2023-6667:  samba security, bug fix, and enhancement update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2023-6667.html"}