(RHSA-2019:3253) Moderate: samba security and bug fix update

2019-10-30T16:07:46
ID RHSA-2019:3253
Type redhat
Reporter RedHat
Modified 2019-10-30T16:15:46

Description

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.9.8). (BZ#1724261)

Security Fix(es):

  • samba: Combination of parameters and permissions can allow the user to escape from the share path definition (CVE-2019-10197)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • Increased performance for Samba vfs_glusterfs when using pthreadpool (BZ#1743595)

  • The samba packages have been upgraded to upstream version 4.9.8 which provides a number of bug fixes and enhancements over the previous version. (BZ#1724261)

Users of Samba with Red Hat Gluster Storage are advised to upgrade to these updated packages.