Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

Fedora 25: 2016-364f61377b Moderate: Samba Privilege Escalation Fix

fedora
Calendar Grey December 22, 2016
Dist Fedora Esm H88
The recent Samba patch for Fedora 25 resolves vulnerabilities linked to the Kerberos authentication system, improving both the system's security and overall stability.
Security fix for CVE-2016-2125, CVE-2016-2126

Summary

Samba is the standard Windows interoperability suite of programs for Linux and

Unix.

Update Information:

Security fix for CVE-2016-2125, CVE-2016-2126

Topics%20covered

Topics Covered

security advisory fedora update privilege escalation samba kerberos

Change Log

References


[ 1 ] Bug #1403114 - CVE-2016-2125 samba: Unconditional privilege delegation to Kerberos servers in trusted realms https://bugzilla.redhat.com/show_bug.cgi?id=1403114 [ 2 ] Bug #1403115 - CVE-2016-2126 samba: Flaws in Kerberos PAC validation can trigger privilege elevation https://bugzilla.redhat.com/show_bug.cgi?id=1403115

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade samba' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
important
Lowest
Low
Medium
High
Critical

Name: samba
Product: Fedora 25
Version: 4.5.3
Release: 0.fc25
URL:
Summary: Server and Client software to interoperate with Windows machines

Topics%20covered

Topics Covered

security advisory fedora update privilege escalation samba kerberos

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.