Moderate: Red Hat Security Advisory: samba security, bug fix, and enhancement update

An update for samba is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

NewStart CGSL CORE 5.04 / MAIN 5.04 : samba Vulnerability (NS-SA-2019-0197)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has samba packages installed that are affected by a vulnerability: - A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to crea...

EulerOS 2.0 SP3 : samba (EulerOS-SA-2019-2018)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS...

ctdb, libsmbclient, libwbclient, samba security update

CentOS Errata and Security Advisory CESA-2019:2099 An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CentOS 7 : samba (CESA-2019:2099)

An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Scientific Linux Security Update : samba on SL7.x x86_64 (20190806)

The following packages have been upgraded to a later upstream version: samba 4.9.1. Security Fixes : - samba: save registry file outside share as unprivileged user CVE-2019-3880 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

samba security, bug fix, and enhancement update

4.9.1-6 - related: 1703204 - Fix printing with smbspool as CUPS backend 4.9.1-5 - resolves: 1703204 - Fix smbspool krb5 authentication 4.9.1-4 - resolves: 1690222 - Fix --max-protocol documentation of smbclient - resolves: 1518353 - Fix 'net ads join -Uadmin@forestdomain' - resolves: 1696524 - Fi...

RHEL 7 : samba (RHSA-2019:1966)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1966 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allo...

RHEL 6 : samba (RHSA-2019:1967)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1967 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allo...

EulerOS 2.0 SP5 : samba (EulerOS-SA-2019-1689)

According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this fl...

FreeBSD : samba -- multiple vulnerabilities (793a0072-7822-11e9-81e2-005056a311d1)

The samba project reports : The checksum validation in the S4U2Self handler in the embedded Heimdal KDC did not first confirm that the checksum was keyed, allowing replacement of the requested target client principal Authenticated users with write permission can trigger a symlink traversal to wri...

Fedora Update for samba FEDORA-2019-208cc34d40

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES11 Security Update : samba (SUSE-SU-2019:14042-1)

This update for samba fixes the following issues : Security issue fixed : CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. Non-security issue fixed: Make init scripts create log directories before...

SUSE SLES12 Security Update : samba (SUSE-SU-2019:1194-1)

This update for samba fixes the following issues : Security issue fixed : CVE-2019-3880: Save registry file outside share as unprivileged user bsc1131060. Non-security issue fixed: Backport changes to support quotas with SMB2 bsc1106119. Note that Tenable Network Security has extracted the...

SUSE SLES12 Security Update : samba (SUSE-SU-2019:1195-1)

This update for samba fixes the following issues : Security issue fixed : CVE-2019-3880: Save registry file outside share as unprivileged user bsc1131060. Non-security issue fixed: Backport changes to support quotas with SMB2 bsc1106119. Note that Tenable Network Security has extracted the...

Samba Path/Symlink Traversal Vulnerability (CVE-2019-3880)

Samba is prone to a path/symlink traversal vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba";...

SUSE-SU-2019:1195-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Save registry file outside share as unprivileged user bsc1131060. Non-security issue fixed: - Backport changes to support quotas with SMB2 bsc1106119...

SUSE-SU-2019:1194-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Save registry file outside share as unprivileged user bsc1131060. Non-security issue fixed: - Backport changes to support quotas with SMB2 bsc1106119...

Security Bulletin: Samba vulnerability affects IBM Storwize V7000 Unified (CVE-2019-3880)

Summary IBM Storwize V7000 Unified is shipped with Samba, for which a fix is available for security vulnerability. Vulnerability Details CVEID: CVE-2019-3880 DESCRIPTION: Samba could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a...

Fedora 28 : 2:samba (2019-019c5314a0)

Update to Samba 4.8.11, Security fixes for CVE-2019-3880 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...