{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated samba packages that fix one security issue and provide several bug fixes and enhancements are now available for Red Hat Gluster Storage 3.4 for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.\n\nSecurity Fix(es):\n\n* samba: save registry file outside share as unprivileged user (CVE-2019-3880)\n\nFor more details about the security issue(s), including the impact, a CVSS the score and other related information refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* The samba and CTDB packages have been upgraded to upstream version 4.9.8, which provide a number of bug fixes and enhancements over the previous release, including numerous changes to the CTDB configuration. See the Solution section for a link to the Knowledge Base article to aid in migration. (BZ#1708284)\n\nUsers of Samba with Red Hat Gluster Storage are advised to upgrade to these updated packages.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2019:1967", "url": "https://access.redhat.com/errata/RHSA-2019:1967" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1691518", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1691518" }, { "category": "external", "summary": "1708284", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1708284" }, { "category": "external", "summary": "1708289", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1708289" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1967.json" } ], "title": "Red Hat Security Advisory: samba security, bug fix and enhancement update", "tracking": { "current_release_date": "2026-06-28T12:06:34+00:00", "generator": { "date": "2026-06-28T12:06:34+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.2.6" } }, "id": "RHSA-2019:1967", "initial_release_date": "2019-07-30T10:23:04+00:00", "revision_history": [ { "date": "2019-07-30T10:23:04+00:00", "number": "1", "summary": "Initial version" }, { "date": "2019-07-30T10:23:04+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2026-06-28T12:06:34+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Gluster 3.4 Samba on RHEL-6", "product": { "name": "Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba", "product_identification_helper": { "cpe": "cpe:/a:redhat:storage:3.4:samba:el6" } } } ], "category": "product_family", "name": "Red Hat Gluster Storage" }, { "branches": [ { "category": "product_version", "name": "libtalloc-debuginfo-0:2.1.14-3.el6rhs.x86_64", "product": { "name": "libtalloc-debuginfo-0:2.1.14-3.el6rhs.x86_64", "product_id": "libtalloc-debuginfo-0:2.1.14-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtalloc-debuginfo@2.1.14-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "pytalloc-0:2.1.14-3.el6rhs.x86_64", "product": { "name": "pytalloc-0:2.1.14-3.el6rhs.x86_64", "product_id": "pytalloc-0:2.1.14-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/pytalloc@2.1.14-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "pytalloc-devel-0:2.1.14-3.el6rhs.x86_64", "product": { "name": "pytalloc-devel-0:2.1.14-3.el6rhs.x86_64", "product_id": "pytalloc-devel-0:2.1.14-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/pytalloc-devel@2.1.14-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtalloc-0:2.1.14-3.el6rhs.x86_64", "product": { "name": "libtalloc-0:2.1.14-3.el6rhs.x86_64", "product_id": "libtalloc-0:2.1.14-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtalloc@2.1.14-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtalloc-devel-0:2.1.14-3.el6rhs.x86_64", "product": { "name": "libtalloc-devel-0:2.1.14-3.el6rhs.x86_64", "product_id": "libtalloc-devel-0:2.1.14-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtalloc-devel@2.1.14-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtdb-devel-0:1.3.16-3.el6rhs.x86_64", "product": { "name": "libtdb-devel-0:1.3.16-3.el6rhs.x86_64", "product_id": "libtdb-devel-0:1.3.16-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtdb-devel@1.3.16-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "python-tdb-0:1.3.16-3.el6rhs.x86_64", "product": { "name": "python-tdb-0:1.3.16-3.el6rhs.x86_64", "product_id": "python-tdb-0:1.3.16-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-tdb@1.3.16-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtdb-0:1.3.16-3.el6rhs.x86_64", "product": { "name": "libtdb-0:1.3.16-3.el6rhs.x86_64", "product_id": "libtdb-0:1.3.16-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtdb@1.3.16-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtdb-debuginfo-0:1.3.16-3.el6rhs.x86_64", "product": { "name": "libtdb-debuginfo-0:1.3.16-3.el6rhs.x86_64", "product_id": "libtdb-debuginfo-0:1.3.16-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtdb-debuginfo@1.3.16-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "tdb-tools-0:1.3.16-3.el6rhs.x86_64", "product": { "name": "tdb-tools-0:1.3.16-3.el6rhs.x86_64", "product_id": "tdb-tools-0:1.3.16-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tdb-tools@1.3.16-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtevent-devel-0:0.9.37-3.el6rhs.x86_64", "product": { "name": "libtevent-devel-0:0.9.37-3.el6rhs.x86_64", "product_id": "libtevent-devel-0:0.9.37-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtevent-devel@0.9.37-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtevent-0:0.9.37-3.el6rhs.x86_64", "product": { "name": "libtevent-0:0.9.37-3.el6rhs.x86_64", "product_id": "libtevent-0:0.9.37-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtevent@0.9.37-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "python-tevent-0:0.9.37-3.el6rhs.x86_64", "product": { "name": "python-tevent-0:0.9.37-3.el6rhs.x86_64", "product_id": "python-tevent-0:0.9.37-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-tevent@0.9.37-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libtevent-debuginfo-0:0.9.37-3.el6rhs.x86_64", "product": { "name": "libtevent-debuginfo-0:0.9.37-3.el6rhs.x86_64", "product_id": "libtevent-debuginfo-0:0.9.37-3.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtevent-debuginfo@0.9.37-3.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-dc-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-dc-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-dc-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-dc@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libsmbclient-devel-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "libsmbclient-devel-0:4.9.8-105.el6rhs.x86_64", "product_id": "libsmbclient-devel-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libsmbclient-devel@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-libs-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-libs-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-libs-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-libs@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-winbind-krb5-locator-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-winbind-krb5-locator-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-winbind-krb5-locator-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-winbind-krb5-locator@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-client-libs-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-client-libs-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-client-libs-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-client-libs@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-krb5-printing-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-krb5-printing-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-krb5-printing-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-krb5-printing@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-devel-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-devel-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-devel-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-devel@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-winbind-modules-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-winbind-modules-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-winbind-modules-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-winbind-modules@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-python-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-python-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-python-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-python@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-debuginfo-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-debuginfo-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-debuginfo-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-debuginfo@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-common-libs-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-common-libs-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-common-libs-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-common-libs@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-client-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-client-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-client-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-client@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-dc-libs-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-dc-libs-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-dc-libs-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-dc-libs@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-common-tools-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-common-tools-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-common-tools-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-common-tools@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-winbind-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-winbind-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-winbind-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-winbind@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libwbclient-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "libwbclient-0:4.9.8-105.el6rhs.x86_64", "product_id": "libwbclient-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libwbclient@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-vfs-glusterfs-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-vfs-glusterfs-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-vfs-glusterfs-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-vfs-glusterfs@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "ctdb-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "ctdb-0:4.9.8-105.el6rhs.x86_64", "product_id": "ctdb-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ctdb@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libsmbclient-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "libsmbclient-0:4.9.8-105.el6rhs.x86_64", "product_id": "libsmbclient-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libsmbclient@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "libwbclient-devel-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "libwbclient-devel-0:4.9.8-105.el6rhs.x86_64", "product_id": "libwbclient-devel-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libwbclient-devel@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba@4.9.8-105.el6rhs?arch=x86_64" } } }, { "category": "product_version", "name": "samba-winbind-clients-0:4.9.8-105.el6rhs.x86_64", "product": { "name": "samba-winbind-clients-0:4.9.8-105.el6rhs.x86_64", "product_id": "samba-winbind-clients-0:4.9.8-105.el6rhs.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-winbind-clients@4.9.8-105.el6rhs?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "libtalloc-0:2.1.14-3.el6rhs.src", "product": { "name": "libtalloc-0:2.1.14-3.el6rhs.src", "product_id": "libtalloc-0:2.1.14-3.el6rhs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtalloc@2.1.14-3.el6rhs?arch=src" } } }, { "category": "product_version", "name": "libtdb-0:1.3.16-3.el6rhs.src", "product": { "name": "libtdb-0:1.3.16-3.el6rhs.src", "product_id": "libtdb-0:1.3.16-3.el6rhs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtdb@1.3.16-3.el6rhs?arch=src" } } }, { "category": "product_version", "name": "libtevent-0:0.9.37-3.el6rhs.src", "product": { "name": "libtevent-0:0.9.37-3.el6rhs.src", "product_id": "libtevent-0:0.9.37-3.el6rhs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libtevent@0.9.37-3.el6rhs?arch=src" } } }, { "category": "product_version", "name": "samba-0:4.9.8-105.el6rhs.src", "product": { "name": "samba-0:4.9.8-105.el6rhs.src", "product_id": "samba-0:4.9.8-105.el6rhs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba@4.9.8-105.el6rhs?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "samba-common-0:4.9.8-105.el6rhs.noarch", "product": { "name": "samba-common-0:4.9.8-105.el6rhs.noarch", "product_id": "samba-common-0:4.9.8-105.el6rhs.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-common@4.9.8-105.el6rhs?arch=noarch" } } }, { "category": "product_version", "name": "samba-pidl-0:4.9.8-105.el6rhs.noarch", "product": { "name": "samba-pidl-0:4.9.8-105.el6rhs.noarch", "product_id": "samba-pidl-0:4.9.8-105.el6rhs.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/samba-pidl@4.9.8-105.el6rhs?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "ctdb-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "ctdb-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libsmbclient-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "libsmbclient-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libsmbclient-devel-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "libsmbclient-devel-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtalloc-0:2.1.14-3.el6rhs.src as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.14-3.el6rhs.src" }, "product_reference": "libtalloc-0:2.1.14-3.el6rhs.src", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtalloc-0:2.1.14-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.14-3.el6rhs.x86_64" }, "product_reference": "libtalloc-0:2.1.14-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtalloc-debuginfo-0:2.1.14-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.14-3.el6rhs.x86_64" }, "product_reference": "libtalloc-debuginfo-0:2.1.14-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtalloc-devel-0:2.1.14-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.14-3.el6rhs.x86_64" }, "product_reference": "libtalloc-devel-0:2.1.14-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtdb-0:1.3.16-3.el6rhs.src as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.16-3.el6rhs.src" }, "product_reference": "libtdb-0:1.3.16-3.el6rhs.src", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtdb-0:1.3.16-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.16-3.el6rhs.x86_64" }, "product_reference": "libtdb-0:1.3.16-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtdb-debuginfo-0:1.3.16-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.16-3.el6rhs.x86_64" }, "product_reference": "libtdb-debuginfo-0:1.3.16-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtdb-devel-0:1.3.16-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.16-3.el6rhs.x86_64" }, "product_reference": "libtdb-devel-0:1.3.16-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtevent-0:0.9.37-3.el6rhs.src as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.37-3.el6rhs.src" }, "product_reference": "libtevent-0:0.9.37-3.el6rhs.src", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtevent-0:0.9.37-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.37-3.el6rhs.x86_64" }, "product_reference": "libtevent-0:0.9.37-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtevent-debuginfo-0:0.9.37-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.37-3.el6rhs.x86_64" }, "product_reference": "libtevent-debuginfo-0:0.9.37-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libtevent-devel-0:0.9.37-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.37-3.el6rhs.x86_64" }, "product_reference": "libtevent-devel-0:0.9.37-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libwbclient-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "libwbclient-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "libwbclient-devel-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "libwbclient-devel-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "pytalloc-0:2.1.14-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.14-3.el6rhs.x86_64" }, "product_reference": "pytalloc-0:2.1.14-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "pytalloc-devel-0:2.1.14-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.14-3.el6rhs.x86_64" }, "product_reference": "pytalloc-devel-0:2.1.14-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "python-tdb-0:1.3.16-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.16-3.el6rhs.x86_64" }, "product_reference": "python-tdb-0:1.3.16-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "python-tevent-0:0.9.37-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.37-3.el6rhs.x86_64" }, "product_reference": "python-tevent-0:0.9.37-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-0:4.9.8-105.el6rhs.src as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-0:4.9.8-105.el6rhs.src" }, "product_reference": "samba-0:4.9.8-105.el6rhs.src", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-client-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-client-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-client-libs-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-client-libs-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-common-0:4.9.8-105.el6rhs.noarch as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.9.8-105.el6rhs.noarch" }, "product_reference": "samba-common-0:4.9.8-105.el6rhs.noarch", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-common-libs-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-common-libs-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-common-tools-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-common-tools-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-dc-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-dc-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-dc-libs-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-dc-libs-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-debuginfo-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-debuginfo-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-devel-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-devel-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-krb5-printing-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-krb5-printing-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-libs-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-libs-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-pidl-0:4.9.8-105.el6rhs.noarch as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.9.8-105.el6rhs.noarch" }, "product_reference": "samba-pidl-0:4.9.8-105.el6rhs.noarch", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-python-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-python-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-vfs-glusterfs-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-vfs-glusterfs-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-winbind-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-winbind-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-winbind-clients-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-winbind-clients-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-winbind-krb5-locator-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-winbind-krb5-locator-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "samba-winbind-modules-0:4.9.8-105.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.9.8-105.el6rhs.x86_64" }, "product_reference": "samba-winbind-modules-0:4.9.8-105.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" }, { "category": "default_component_of", "full_product_name": { "name": "tdb-tools-0:1.3.16-3.el6rhs.x86_64 as a component of Red Hat Gluster 3.4 Samba on RHEL-6", "product_id": "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.16-3.el6rhs.x86_64" }, "product_reference": "tdb-tools-0:1.3.16-3.el6rhs.x86_64", "relates_to_product_reference": "6Server-RH-Gluster-3.4-Samba" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Michael Hanselmann" ] } ], "cve": "CVE-2019-3880", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "discovery_date": "2019-03-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1691518" } ], "notes": [ { "category": "description", "text": "A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share.", "title": "Vulnerability description" }, { "category": "summary", "text": "samba: save registry file outside share as unprivileged user", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the version of samba shipped with Red Hat Gluster Storage 3, as it contains the vulnerable functionality.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.14-3.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.16-3.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.37-3.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.9.8-105.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.9.8-105.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.9.8-105.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.16-3.el6rhs.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-3880" }, { "category": "external", "summary": "RHBZ#1691518", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1691518" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-3880", "url": "https://www.cve.org/CVERecord?id=CVE-2019-3880" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-3880", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3880" }, { "category": "external", "summary": "https://www.samba.org/samba/security/CVE-2019-3880.html", "url": "https://www.samba.org/samba/security/CVE-2019-3880.html" } ], "release_date": "2019-04-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2019-07-30T10:23:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, the smb service will be restarted automatically.\n\nFor details on migrating Samba/CTDB configuration files, refer to: \n\nhttps://access.redhat.com/solutions/4311261", "product_ids": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.14-3.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.16-3.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.37-3.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.9.8-105.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.9.8-105.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.9.8-105.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.16-3.el6rhs.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2019:1967" }, { "category": "workaround", "details": "Either turn off SMB1 by setting the global parameter:\n'min protocol = SMB2'\nor if SMB1 is required turn off unix extensions by setting the global parameter:\n'unix extensions = no'\nin the smb.conf file.", "product_ids": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.14-3.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.16-3.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.37-3.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.9.8-105.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.9.8-105.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.9.8-105.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.16-3.el6rhs.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L", "version": "3.0" }, "products": [ "6Server-RH-Gluster-3.4-Samba:ctdb-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libsmbclient-devel-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.14-3.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtalloc-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-debuginfo-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtalloc-devel-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.16-3.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtdb-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-debuginfo-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtdb-devel-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.37-3.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:libtevent-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-debuginfo-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libtevent-devel-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:libwbclient-devel-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:pytalloc-devel-0:2.1.14-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tdb-0:1.3.16-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:python-tevent-0:0.9.37-3.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-0:4.9.8-105.el6rhs.src", "6Server-RH-Gluster-3.4-Samba:samba-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-client-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-0:4.9.8-105.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-common-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-common-tools-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-dc-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-debuginfo-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-devel-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-krb5-printing-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-libs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-pidl-0:4.9.8-105.el6rhs.noarch", "6Server-RH-Gluster-3.4-Samba:samba-python-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-vfs-glusterfs-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-clients-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-krb5-locator-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:samba-winbind-modules-0:4.9.8-105.el6rhs.x86_64", "6Server-RH-Gluster-3.4-Samba:tdb-tools-0:1.3.16-3.el6rhs.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "samba: save registry file outside share as unprivileged user" } ] }