Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora: 2020-e244c98af5 Critical: Samba 4.10.15 Denial of Service

fedora
Calendar Grey May 6, 2020
Dist Fedora Esm H88
The recent update to samba 4.10.15 in Fedora tackles significant security vulnerabilities, which are vital for ensuring system stability.
Update to Samba 4.10.15

Summary

Samba is the standard Windows interoperability suite of programs for Linux and

Unix.

Update to Samba 4.10.15

* Tue Apr 28 2020 Guenther Deschner - 4.10.15-0

- Update to Samba 4.10.15

- resolves: #1825731, #1828870 - Security fixes for CVE-2020-10700

- resolves: #1825734, #1828872 - Security fixes for CVE-2020-10704

[ 1 ] Bug #1825731 - CVE-2020-10700 samba: Use-after-free in Samba AD DC LDAP Server with ASQ

https://bugzilla.redhat.com/show_bug.cgi?id=1825731

[ 2 ] Bug #1825734 - CVE-2020-10704 samba: LDAP Denial of Service (stack overflow) in Samba AD DC

https://bugzilla.redhat.com/show_bug.cgi?id=1825734

su -c 'dnf upgrade --advisory FEDORA-2020-e244c98af5' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 30
Version: 4.10.15
Release: 0.fc30
URL: /
Summary: Server and Client software to interoperate with Windows machines

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here