Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 33: FEDORA-2021-1d0807008b Severe: Samba Authentication Bug

fedora
Calendar Grey May 6, 2021
Dist Fedora Esm H88
The upgrade to Samba version 4.13.8 resolves various vulnerabilities in Fedora 33, improving both the security of the file server and its compatibility capabilities.
Update to Samba 4.13.8 - Security fixes for CVE-2021-20254

Summary

Samba is the standard Windows interoperability suite of programs for Linux and

Unix.

Update to Samba 4.13.8 - Security fixes for CVE-2021-20254

* Thu Apr 29 2021 Guenther Deschner - 4.13.8-0

- Update to Samba 4.13.8

- resolves: #1949442, #1955027 - Security fixes for CVE-2021-20254

[ 1 ] Bug #1949442 - CVE-2021-20254 samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token

https://bugzilla.redhat.com/show_bug.cgi?id=1949442

su -c 'dnf upgrade --advisory FEDORA-2021-1d0807008b' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 33
Version: 4.13.8
Release: 0.fc33
URL:
Summary: Server and Client software to interoperate with Windows machines

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here