Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 452
Alerts This Week
Warning Icon 1 452

SUSE: 2018:2339-2 Moderate: Samba Denial of Service And Buffer Overflow

suse
Calendar Grey October 18, 2018
Dist Suse Esm H88
SUSE has released a security update for OpenLDAP that resolves important security issues, enhancing overall system reliability for its users.
An update that fixes two vulnerabilities is now available

Summary

This update for samba fixes the following issues: The following security issues were fixed: - CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally (bsc#1081741). - CVE-2018-10858: smbc_urlencode helper function is a subject to buffer overflow (bsc#1103411) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2018-1574=1 Package List: - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): libdcerpc-atsvc0-4.2.4-28.29.1 libdcerpc-atsvc0-debuginfo-4.2.4-28.29.1

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow samba suse linux

References

#1081741 #1103411

Cross- CVE-2018-1050 CVE-2018-10858

Affected Products:

SUSE Linux Enterprise Server 12-SP2-BCL

https://www.suse.com/security/cve/CVE-2018-1050.html

https://www.suse.com/security/cve/CVE-2018-10858.html

https://bugzilla.suse.com/1081741

https://bugzilla.suse.com/1103411

Announcement ID: SUSE-SU-2018:2339-2
Rating: moderate

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow samba suse linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.