Alerts This Week
Warning Icon 1 609
Alerts This Week
Warning Icon 1 609

Debian: 2023-456-01 High: File Server Ransomware Threat

slackware
Calendar Grey July 14, 2017
Dist Slackware Esm H88
Recent samba updates address a severe vulnerability that allows authentication bypass in all Slackware releases from version 14.0 through to the current edition.
New samba packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue

Summary

Here are the details from the Slackware 14.2 ChangeLog: patches/packages/samba-4.4.15-i586-1_slack14.2.txz: Upgraded. This update fixes an authentication validation bypass security issue: "Orpheus' Lyre mutual authentication validation bypass" All versions of Samba from 4.0.0 onwards using embedded Heimdal Kerberos are vulnerable to a man-in-the-middle attack impersonating a trusted server, who may gain elevated access to the domain by returning malicious replication or authorization data. Samba binaries built against MIT Kerberos are not vulnerable. For more information, see: https://www.cve.org/CVERecord?id=CVE-2017-11103 (* Security fix *)

Topics%20covered

Topics Covered

security advisory critical samba slackware authentication bypass

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware 14.2:
Updated package for Slackware x86_64 14.2:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 14.0 package: 630068826ccb4143f05b0f69a930ae26 samba-4.4.15-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: cec3dbc80c5b98514fe00a49af2b14a4 samba-4.4.15-x86_64-1_slack14.0.txz
Slackware 14.1 package: 39dd6d41675f108f3ffd29220b49ffea samba-4.4.15-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: 98c679570096bd9af311b10e381ed144 samba-4.4.15-x86_64-1_slack14.1.txz
Slackware 14.2 package: 66b42142d08232dcd9f6a6cd3ca55d0b samba-4.4.15-i586-1_slack14.2.txz
Slackware x86_64 14.2 package: 57e1fb274d74cf8df9ecb0e706681be2 samba-4.4.15-x86_64-1_slack14.2.txz
Slackware -current package: 029388cff26f56eb9e64cf8fa87a262b n/samba-4.6.6-i586-1.txz
Slackware x86_64 -current package: 3d99d640868c25c3ebfdbbd85777e34e n/samba-4.6.6-x86_64-1.txz

Topics%20covered

Topics Covered

security advisory critical samba slackware authentication bypass

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg samba-4.4.15-i586-1_slack14.2.txz Then, if Samba is running restart it: # /etc/rc.d/rc.samba restart

Related News

Your message here