Lucene search

K
oraclelinuxOracleLinuxELSA-2020-1878
HistoryMay 05, 2020 - 12:00 a.m.

samba security, bug fix, and enhancement update

2020-05-0500:00:00
linux.oracle.com
35

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

openchange
[2.3-24.0.1]

  • Add patch to build against samba 4.11
    [2.3-24]
  • Rebuild for newer samba and libldb
    samba
    [4.11.2-13]
  • resolves: #1802182 - Fix join using netbios name
    [4.11.2-12]
  • related: #1781232 - Improve debug output of smbclient
  • resolves: #1794461 - Do not return bogus inode numbers in
    cli_qpathinfo2()/cli_qpathinfo3() for SMB1
  • resolves: #1794442 - Fix segfault in smbd_do_qfilepathinfo()
    [4.11.2-11]
  • resolves: #1778130 - Remove usage of DES encryption types in krb5
    [4.11.2-10]
  • resolves: #1790353 - Fix access check in DsRGetForestTrustInformation
  • resolves: #1791209 - Fix CVE-2019-14907
    [4.11.2-9]
  • resolves: #1785134 - Fix libwbclient manual alternative settings
    [4.11.2-8]
  • resolves: #1781232 - Fix smbclient debug message
    [4.11.2-7]
  • related: #1637861 - Fix trust creation if weak crypto is disallowed
    [4.11.2-6]
  • resolves: #1637861 - Use GnuTLS for crypto
    [4.11.2-4]
  • related: #1754409 - Add patch to avoid overlinking with libnsl and libsocket
  • related: #1754409 - Fix permissions for pidl
  • related: #1754409 - Fix logrotate script
  • related: #1754409 - Add missing README files
    [4.11.2-3]
  • related: #1754409 - Fix pidl packaging
    [4.11.2-1]
  • resolves: #1754409 - Rebase to Samba version 4.11.2
  • resolves: #1776312 - Winbind is not restarted on upgrade
  • resolves: #1764469 - Fix CVE-2019-10218
  • resolves: #1746241 - Fix CVE-2019-10197
  • resolves: #1710980 - Add support for KCM ccache in pam_winbind

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N