[SECURITY] [DLA 3563-1] samba security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3563-1 [email protected] https://www.debian.org/lts/security/ Lee Garrett September 12, 2023 https://wiki.debian.org/LTS -...

SUSE: Security Advisory (SUSE-SU-2020:2673-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2020-1696)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : samba (EulerOS-SA-2020-1696)

According to the version of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and al...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2020-1511)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : samba (EulerOS-SA-2020-1511)

According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions...

Security fix for the ALT Linux 8 package samba-DC version 4.9.18-alt1

4.9.18-alt1 built Feb. 12, 2020 Evgeny Sinelnikov in task 245130 Jan. 24, 2020 Evgeny Sinelnikov - Update to latest security release of the Samba 4.9 - Security fixes: + CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD Directory not automatic + CVE-2019-14907: Crash after...

Security fix for the ALT Linux 8 package samba version 4.9.18-alt1

4.9.18-alt1 built Feb. 12, 2020 Evgeny Sinelnikov in task 245130 Jan. 24, 2020 Evgeny Sinelnikov - Update to latest security release of the Samba 4.9 - Security fixes: + CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD Directory not automatic + CVE-2019-14907: Crash after...

Fedora 30 : 2:samba (2020-f92cd0e72b)

Update to Samba 4.10.13 ---- Update to Samba 4.10.12 - Security fixes for CVE-2019-14902, CVE-2019-14907 and CVE-2019-19344 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean...

openSUSE: Security Advisory for samba (openSUSE-SU-2020:0122_1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:0223-1)

This update for samba fixes the following issues : Security issues fixed : CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing bsc1160888. CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not workin...

Security fix for the ALT Linux 10 package samba version 4.10.13-alt1

Jan. 24, 2020 Evgeny Sinelnikov 4.10.13-alt1 - Update to latest stable release of the Samba 4.10 - Security fixes: + CVE-2019-14902: Replication of ACLs set to inherit down a subtree on AD Directory not automatic + CVE-2019-14907: Crash after failed character conversion at log level 3 or above +...

Ubuntu 16.04 LTS / 18.04 LTS : Samba vulnerabilities (USN-4244-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4244-1 advisory. It was discovered that Samba did not automatically replicate ACLs set to inherit down a subtree on AD Directory, contrary to expectations. Th...

Ubuntu: Security Advisory (USN-4244-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samba Use-After-Free Vulnerability (CVE-2019-19344)

Samba is prone to a use-after-free vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-19344

There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc while other local variables still point at the original buffer...

DEBIAN-CVE-2019-19344

There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc while other local variables still point at the original buffer...

CVE-2019-19344

There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc while other local variables still point at the original buffer...

USN-4244-1: Samba vulnerabilities

It was discovered that Samba did not automatically replicate ACLs set to inherit down a subtree on AD Directory, contrary to expectations. This issue was only addressed in Ubuntu 18.04 LTS, Ubuntu 19.04 and Ubuntu 19.10. CVE-2019-14902 Robert Święcki discovered that Samba incorrectly handled...

CVE-2019-19344

CVE-2019-19344 affects Samba 4.9.x (before 4.9.18), 4.10.x (before 4.10.12), and 4.11.x (before 4.11.5). The issue is a use-after-free caused by a realloc() call while other local variables still reference the original buffer, impacting Samba AD DC DNS zone scavenging. Connected advisories confir...