[slackware-security] samba

New samba packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/samba-4.4.8-i586-1slack14.2.txz: Upgraded. This release fixes security issues: CVE-2016-2123 Samba NDR Parsing ndrpulldnspname Heap-bas...

Fedora 25 : 2:samba (2016-364f61377b)

Security fix for CVE-2016-2125, CVE-2016-2126 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2016:3272-1)

This update for samba fixes the following issues: Security issues fixed : - CVE-2016-2125: Don't send delegated credentials to all servers. bsc1014441. - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. bsc1014442. - CVE-2016-2123: Heap-based Buffer...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2016:3271-1)

This update for samba fixes the following issues: Security issues fixed : - CVE-2016-2125: Don't send delegated credentials to all servers. bsc1014441. - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. bsc1014442. - CVE-2016-2123: Heap-based Buffer...

[ASA-201612-19] samba: multiple issues

Arch Linux Security Advisory ASA-201612-19 ========================================== Severity: Critical Date : 2016-12-22 CVE-ID : CVE-2016-2123 CVE-2016-2125 CVE-2016-2126 Package : samba Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-111 Summary ======= The packa...

Debian DSA-3740-1 : samba - security update

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2016-2119 Stefan Metzmacher discovered that client-side SMB2/3 required signing can be downgraded,...

Ubuntu 14.04 LTS / 16.04 LTS : Samba vulnerabilities (USN-3158-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3158-1 advisory. Frederic Besler and others discovered that the ndrpulldnspnam function in Samba contained an integer overflow. An authenticated attacker coul...

Ubuntu: Security Advisory (USN-3158-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3740-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3740-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 19, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3740-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3740-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 19, 2016 https://www.debian.org/security/faq -...

Security fix for the ALT Linux 8 package samba version 4.5.3-alt1

Dec. 19, 2016 Evgeny Sinelnikov 4.5.3-alt1 - Update for release with security fixes: - CVE-2016-2123 ndrpulldnspname contains an integer wrap problem - CVE-2016-2125 client code always requests a forwardable ticket - CVE-2016-2126 crash winbindd using a legitimate Kerberos ticket...

Security fix for the ALT Linux 7 package samba version 4.5.3-alt1.M70P.1

Dec. 19, 2016 Evgeny Sinelnikov 4.5.3-alt1.M70P.1 - Update for release with security fixes: - CVE-2016-2123 ndrpulldnspname contains an integer wrap problem - CVE-2016-2125 client code always requests a forwardable ticket - CVE-2016-2126 crash winbindd using a legitimate Kerberos ticket...

Security fix for the ALT Linux 7 package samba-DC version 4.5.3-alt1.M70P.1

Dec. 19, 2016 Evgeny Sinelnikov 4.5.3-alt1.M70P.1 - Update for release with security fixes: - CVE-2016-2123 ndrpulldnspname contains an integer wrap problem - CVE-2016-2125 client code always requests a forwardable ticket - CVE-2016-2126 crash winbindd using a legitimate Kerberos ticket...

Security fix for the ALT Linux 10 package samba version 4.5.3-alt1.S1

Dec. 19, 2016 Evgeny Sinelnikov 4.5.3-alt1.S1 - Update for release with security fixes: - CVE-2016-2123 ndrpulldnspname contains an integer wrap problem - CVE-2016-2125 client code always requests a forwardable ticket - CVE-2016-2126 crash winbindd using a legitimate Kerberos ticket...

DSA-3740-1 samba - security update

Bulletin has no description...

Debian Security Advisory DSA 3740-1 (samba - security update)

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2016-2119 Stefan Metzmacher discovered that client-side SMB2/3 required signing can be downgraded, allowi...

Security fix for the ALT Linux 8 package samba-DC version 4.5.3-alt1

Dec. 19, 2016 Evgeny Sinelnikov 4.5.3-alt1 - Update for release with security fixes: - CVE-2016-2123 ndrpulldnspname contains an integer wrap problem - CVE-2016-2125 client code always requests a forwardable ticket - CVE-2016-2126 crash winbindd using a legitimate Kerberos ticket...

Debian: Security Advisory (DSA-3740-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...