Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CentOS Samba libraries allow file truncation on read‑only shares
published 5 months ago
Summary
A flaw in the Samba components for CentOS (ctdb, libsmbclient, libwbclient and related packages) let a user who only had read access delete the contents of a file by overwriting it. This could lead to loss of data on shared folders. Update the affected CentOS packages to the latest versions that include the fix.
What to do
- Update centos ctdb to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos ctdb-tests to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos libsmbclient to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos libsmbclient-devel to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos libwbclient to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos libwbclient-devel to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-client to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-client-libs to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-common to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-common-libs to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-common-tools to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-dc to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-dc-libs to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-devel to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-krb5-printing to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-libs to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-pidl to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-python to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-python-test to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-test to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-test-libs to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-vfs-glusterfs to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-winbind to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-winbind-clients to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-winbind-krb5-locator to version 4.10.16-25.el7_9.tuxcare.els5.
- Update centos samba-winbind-modules to version 4.10.16-25.el7_9.tuxcare.els5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS:7 | centos | ctdb |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | ctdb-tests |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | libsmbclient |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | libsmbclient-devel |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | libwbclient |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | libwbclient-devel |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-client |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-client-libs |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-common |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-common-libs |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-common-tools |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-dc |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-dc-libs |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-devel |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-krb5-printing |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-libs |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-pidl |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-python |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-python-test |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-test |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-test-libs |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-vfs-glusterfs |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-winbind |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-winbind-clients |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-winbind-krb5-locator |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
| TuxCare:CentOS:7 | centos | samba-winbind-modules |
< 4.10.16-25.el7_9.tuxcare.els5 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els5
|
Original advisory text
samba: Fix of CVE-2023-4091
- CVE-2023-4091: fix open_file() access check that allowed a client with
read-only share access to truncate files via SMB2 OVERWRITE; the access
check now uses open_access_mask instead of the requested access_mask
read-only share access to truncate files via SMB2 OVERWRITE; the access
check now uses open_access_mask instead of the requested access_mask
References
Timeline
Published21 May 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1779132536 · OSV
Track software like this
Free during beta