SUSE-SU-2019:1040-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. ldb was updated to version 1.2.4 bsc1125410 bsc1131686: - Out of bound read ...

SUSE-SU-2019:1037-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. Non-security issues fixed: - Fix vfsceph ftruncate and fallocate handling...

OPENSUSE-SU-2019:1180-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. ldb was updated to version 1.2.4 bsc1125410 bsc1131686: - Out of bound read ...

MGASA-2019-0011 Updated ldb, talloc, and samba packages fix security vulnerabilities

Florian Stuelpner discovered that Samba is vulnerable to infinite query recursion caused by CNAME loops, resulting in denial of service CVE-2018-14629. Alex MacCuish discovered that a user with a valid certificate or smart card can crash the Samba AD DC's KDC when configured to accept smart-card...

DSA-4345-1 samba - security update

Bulletin has no description...

SUSE-SU-2018:2320-2 Security update for samba

This update for samba fixes the following issues: The following security vulnerability was fixed: - CVE-2018-10858: smbcurlencode helper function is a subject to buffer overflow bsc1103411 The following other bugs were fixed: - Fix libnsswins.so.2 link libreplace with rpath bsc1054849...

SUSE-SU-2018:2339-2 Security update for samba

This update for samba fixes the following issues: The following security issues were fixed: - CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally bsc1081741. - CVE-2018-10858: smbcurlencode helper function is a subject to buffer overflow bsc1103411...

SUSE-SU-2018:3161-1 Security update for samba

Samba was updated to 4.6.15, bringing bug and security fixes. bsc1110943 Following security issues were fixed: - CVE-2018-10919: Fix unauthorized attribute access via searches. bsc1095057; Non-security bugs fixed: - Fix ctdbmutexcephradoshelper deadlock bsc1102230. - Allow idmaprid to have primar...

DLA-1539-1 samba - security update

Bulletin has no description...

openSUSE Security Update : samba (openSUSE-2018-891)

This update for samba fixes the following issues : The following security vulnerabilities were fixed : - CVE-2018-1139: Disable NTLMv1 auth if smb.conf doesn't allow it; bsc1095048 - CVE-2018-1140: ldbsearch 'distinguishedName=abc' and DNS query with escapes crashes; bsc1095056 - CVE-2018-10919:...

SUSE-SU-2018:2329-1 Security update for samba

This update for samba fixes the following issues: The following security issues were fixed: - CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient bsc1103411. The following other bugs were fixed: - s3:winbindd: allow a fallback to NTLMSSP for LDAP connections...

SUSE-SU-2018:2321-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally bsc1081741. - CVE-2017-14746: Fixed use-after-free vulnerability bsc1060427. - CVE-2017-15275: Fixed server heap memory information leak...

SUSE-SU-2018:2320-1 Security update for samba

This update for samba fixes the following issues: The following security vulnerability was fixed: - CVE-2018-10858: smbcurlencode helper function is a subject to buffer overflow bsc1103411 The following other bugs were fixed: - Fix libnsswins.so.2 link libreplace with rpath bsc1054849...

SUSE-SU-2018:2318-1 Security update for samba

This update for samba fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-1139: Disable NTLMv1 auth if smb.conf doesn't allow it; bsc1095048 - CVE-2018-1140: ldbsearch 'distinguishedName=abc' and DNS query with escapes crashes; bsc1095056 - CVE-2018-10919:...

SUSE-SU-2018:2319-1 Security update for samba

This update for samba fixes the following issues: The following security vulnerability was fixed: - CVE-2018-10858: Fixed insufficient input validation on client directory listing in libsmbclient; bsc1103411; The following other change was made: - s3: winbind: Fix 'winbind normalize names' in...

SUSE-SU-2018:1687-1 Security update for samba

Samba was updated to 4.6.14, fixing bugs and security issues: Version update to 4.6.14 bsc1093664: + vfsceph: add fake async pwrite/pread send/recv hooks; bso13425. + Fix memory leak in vfsceph; bso13424. + winbind: avoid using fstrcpydcname,... in dualinitconnection; bso13294. + s3:smb2server:...

DSA-4135-1 samba - security update

Bulletin has no description...

Debian: Security Advisory (DLA-894-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2018:0018-1 Security update for samba

This update for samba fixes the following issues: - CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; bsc1063008; bso13077; - s3/libads: fix seal/signed ldap connections so they are reused; bsc1016531...

SUSE SLES11 Security Update : samba (SUSE-SU-2018:0018-1)

"This update for samba fixes the following issues : - CVE-2017-15275: s3: smbd: Chain code can return uninitialized memory when talloc buffer is grown; bsc1063008 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SUSE...