Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 28: FEDORA-2019-019c5314a0 Critical: Samba Security Fix

fedora
Calendar Grey April 29, 2019
Dist Fedora Esm H88
Essential Samba security patch for Fedora 28 tackles CVE-2019-3880. Ensure your system remains secure by applying the newest updates.
Update to Samba 4.8.11, Security fixes for CVE-2019-3880

Summary

Samba is the standard Windows interoperability suite of programs for Linux and

Unix.

Update to Samba 4.8.11, Security fixes for CVE-2019-3880

* Mon Apr 8 2019 Guenther Deschner - 4.8.11-0

- Update to Samba 4.8.11

- resolves: #1691518, #1697717 - Security fixes for CVE-2019-3880

* Thu Apr 4 2019 Guenther Deschner - 4.8.10-0

- Update to Samba 4.8.10

* Tue Feb 12 2019 Guenther Deschner - 4.8.9-1

- resolves: #1674547 - Move samba.xattr modules out of python3 test package

* Thu Feb 7 2019 Guenther Deschner - 4.8.9-0

- Update to Samba 4.8.9

* Thu Dec 13 2018 Guenther Deschner - 4.8.8-0

- Update to Samba 4.8.8

* Tue Nov 27 2018 Guenther Deschner - 4.8.7-0

- Update to Samba 4.8.7

- resolves: #1625449, #1654078 - Security fixes for CVE-2018-14629

- resolves: #1642545, #1654082 - Security fixes for CVE-2018-16841

- resolves: #1646377, #1654091 - Security fixes for CVE-2018-16851

- resolves: #1647246, #1654093 - Security fixes for CVE-2018-16853

* Tue Oct 9 2018 Guenther Deschner - 4.8.6-0

- Update to Samba 4.8.6

* Thu Oct 4 2018 Guenther Deschner - 4.8.5-1

- resolves: #1625170 - Fix vfs_fruit

* Fri Aug 24 2018 Guenther Deschner - 4.8.5-0

- Update to Samba 4.8.5

* Wed Aug 15 2018 Guenther Deschner - 4.8.4-0

- Update to Samba 4.8.4

- resolves: #1589651, #1617916 - Security fixes for CVE-2018-1139

- resolves: #1580230, #1618613 - Security fixes for CVE-2018-1140

- resolves: #1612805, #1618697 - Security fixes for CVE-2018-10858

- resolves: #1610640, #1617910 - Security fixes for CVE-2018-10918

- resolves: #1610645, #1617911 - Security fixes for CVE-2018-10919

* Tue Jul 24 2018 Alexander Bokovoy - 4.8.3-2

- Rebuild samba against a downgraded libldb version

- Fixes: #1601944

- Samba 4.8 is not compatible with libldb 1.4

- Rely on a special downgrade version 1.4.0-2fc28.1.3.4

* Tue Jun 26 2018 Andreas Schneider - 4.8.3-1

- Update to Samba 4.8.3

- Remove python(2|3)-subunit dependency

* Wed May 16 2018 Guenther Deschner - 4.8.2-0

- Update to Samba 4.8.2

* Wed May 9 2018 Andreas Schneider - 4.8.1-1

- resolves: #1574177 - Fix smbspool command line argument handling

* Thu Apr 26 2018 Guenther Deschner - 4.8.1-0

- Update to Samba 4.8.1

* Wed Mar 14 2018 Guenther Deschner - 4.8.0-7

- resolves: #1554754, #1554756 - Security fixes for CVE-2018-1050 CVE-2018-1057

- resolves: #1555112 - Update to Samba 4.8.0

* Tue Mar 13 2018 Andreas Schneider - 4.8.0rc4-6

- resolves: #1552652 - Fix usage of nc in ctdb tests and only recommned it

[ 1 ] Bug #1691518 - CVE-2019-3880 samba: save registry file outside share as unprivileged user

https://bugzilla.redhat.com/show_bug.cgi?id=1691518

su -c 'dnf upgrade --advisory FEDORA-2019-019c5314a0' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 28
Version: 4.8.11
Release: 0.fc28
URL:
Summary: Server and Client software to interoperate with Windows machines

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here