Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Fedora 30 Samba Update FEDORA-2020-f92cd0e72b Critical Security Fixes

fedora
Calendar Grey February 7, 2020
Dist Fedora Esm H88
The latest enhancement for Samba in Fedora 30 resolves severe vulnerabilities linked to CVE-2019-14902, CVE-2019-14907, and CVE-2019-19344.
Update to Samba 4.10.13 ---- Update to Samba 4.10.12 - Security fixes for CVE-2019-14902, CVE-2019-14907 and CVE-2019-19344

Summary

Samba is the standard Windows interoperability suite of programs for Linux and

Unix.

Update to Samba 4.10.13 ---- Update to Samba 4.10.12 - Security fixes for

CVE-2019-14902, CVE-2019-14907 and CVE-2019-19344

* Thu Jan 23 2020 Guenther Deschner - 4.10.13-0

- Update to Samba 4.10.13

* Tue Jan 21 2020 Guenther Deschner - 4.10.12-0

- Update to Samba 4.10.12

- resolves: #1791201, #1793405 - Security fixes for CVE-2019-14902

- resolves: #1791207, #1793407 - Security fixes for CVE-2019-14907

- resolves: #1791204, #1793406 - Security fixes for CVE-2019-19344

* Tue Dec 10 2019 Guenther Deschner - 4.10.11-0

- Update to Samba 4.10.11

- resolves: #1778586, #1781542 - Security fixes for CVE-2019-14861

- resolves: #1778589, #1781545 - Security fixes for CVE-2019-14870

* Tue Oct 29 2019 Guenther Deschner - 4.10.10-0

- Update to Samba 4.10.10

- resolves: #1763137, #1766558 - Security fixes for CVE-2019-10218

- resolves: #1764126, #1766559 - Security fixes for CVE-2019-14833

- resolves: #1764142, #1766847 - Security fixes for CVE-2019-14847

* Thu Oct 17 2019 Guenther Deschner - 4.10.9-0

- Update to Samba 4.10.9

* Tue Sep 3 2019 Guenther Deschner - 4.10.8-0

- Update to Samba 4.10.8

- resolves: #1746225, #1748308 - Security fixes for CVE-2019-10197

* Thu Aug 22 2019 Guenther Deschner - 4.10.7-0

- Update to Samba 4.10.7

* Fri Aug 16 2019 Alexander Bokovoy - 4.10.6-1

- Fix Samba bug

- Fixes: Windows systems cannot resolve IPA users and groups over LSA RPC

* Mon Jul 8 2019 Guenther Deschner - 4.10.6-0

- Update to Samba 4.10.6

* Mon Jul 1 2019 Guenther Deschner - 4.10.5-2

- resolves: #1718113 - Avoid deprecated time.clock in wafsamba

- resolves: #1711638 - Update to latest waf version 2.0.17

* Thu Jun 20 2019 Guenther Deschner - 4.10.5-1

- resolves: #1602824 - Make vfs_fruit operable with other remote VFS modules

- resolves: #1716455 - Avoid pathconf() in get_real_filename() VFS calls

- resolves: #1706090, #1700791 - Fix smbspool

* Wed Jun 19 2019 Guenther Deschner - 4.10.5-0

- Update to Samba 4.10.5

- resolves: #1711816, #1721872 - Security fixes for CVE-2019-12435

- resolves: #1711837, #1721873 - Security fixes for CVE-2019-12436

* Tue May 28 2019 Guenther Deschner - 4.10.4-1

- Add missing ctdb directories

- resolves: #1656777

* Wed May 22 2019 Guenther Deschner - 4.10.4-0

- Update to Samba 4.10.4

* Tue May 14 2019 Guenther Deschner - 4.10.3-0

- Update to Samba 4.10.3

- resolves: #1705877, #1709679 - Security fixes for CVE-2018-16860

* Sun Apr 28 2019 Alexander Bokovoy - 4.10.2-1.1

- Rebuild against krb5 1.17-14

* Mon Apr 15 2019 Andreas Schneider - 4.10.2-1

- resolves: #1699230 - Rebuild for MIT Kerberos soname bump of libkadm5srv

[ 1 ] Bug #1791201 - CVE-2019-14902 samba: Replication of ACLs set to inherit down a subtree on AD Directory not automatic

https://bugzilla.redhat.com/show_bug.cgi?id=1791201

[ 2 ] Bug #1791207 - CVE-2019-14907 samba: Crash after failed character conversion at log level 3 or above

https://bugzilla.redhat.com/show_bug.cgi?id=1791207

[ 3 ] Bug #1791204 - CVE-2019-19344 samba: Use after free during DNS zone scavenging in Samba AD DC

https://bugzilla.redhat.com/show_bug.cgi?id=1791204

su -c 'dnf upgrade --advisory FEDORA-2020-f92cd0e72b' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 30
Version: 4.10.13
Release: 0.fc30
URL:
Summary: Server and Client software to interoperate with Windows machines

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here