Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Red Hat CTDB allows creating files outside shared folder
published 5 months ago
Summary
A race condition in the directory‑creation function could let a client using SMB1 or NFS place a new folder outside the area that was shared. This could expose data or allow unwanted changes on the server. Apply the latest updates for the listed Red Hat packages to fix the issue.
What to do
- Update redhat ctdb to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat ctdb-tests to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat libsmbclient to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat libsmbclient-devel to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat libwbclient to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat libwbclient-devel to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-client to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-client-libs to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-common to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-common-libs to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-common-tools to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-dc to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-dc-libs to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-devel to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-krb5-printing to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-libs to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-pidl to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-python to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-python-test to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-test to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-test-libs to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-vfs-glusterfs to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-winbind to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-winbind-clients to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-winbind-krb5-locator to version 4.10.16-25.el7_9.tuxcare.els9.
- Update redhat samba-winbind-modules to version 4.10.16-25.el7_9.tuxcare.els9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:RHEL:7 | redhat | ctdb |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | ctdb-tests |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | libsmbclient |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | libsmbclient-devel |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | libwbclient |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | libwbclient-devel |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-client |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-client-libs |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-common |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-common-libs |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-common-tools |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-dc |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-dc-libs |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-devel |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-krb5-printing |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-libs |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-pidl |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-python |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-python-test |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-test |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-test-libs |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-vfs-glusterfs |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-winbind |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-winbind-clients |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-winbind-krb5-locator |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
| TuxCare:RHEL:7 | redhat | samba-winbind-modules |
< 4.10.16-25.el7_9.tuxcare.els9 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els9
|
Original advisory text
samba: Fix of CVE-2021-43566
- CVE-2021-43566: fix mkdir_internal() symlink race that allowed an SMB1
or NFS client to create a directory outside the exported share; pin
the parent via vfs_ChDir() and validate the relative path before
SMB_VFS_MKDIR()
or NFS client to create a directory outside the exported share; pin
the parent via vfs_ChDir() and validate the relative path before
SMB_VFS_MKDIR()
References
Timeline
Published29 May 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1780070780 · OSV
Track software like this
Free during beta