Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

SUSE: 2018:4066-1 Moderate: Samba Software Security Issues

suse
Calendar Grey December 10, 2018
Dist Suse Esm H88
SUSE Security Patch addresses multiple samba flaws classified under moderate risk, providing crucial corrections and recommendations.
An update that solves four vulnerabilities and has 5 fixes is now available

Summary

This update for samba fixes the following issues: Update to samba version 4.7.11. Security issues fixed: - CVE-2018-14629: Fixed CNAME loops in Samba AD DC DNS server (bsc#1116319). - CVE-2018-16841: Fixed segfault on PKINIT when mis-matching principal (bsc#1116320). - CVE-2018-16851: Fixed NULL pointer de-reference in Samba AD DC LDAP server (bsc#1116322). - CVE-2018-16853: Mark MIT support for the AD DC experimental (bsc#1116324). Non-security issues fixed: - Fixed do not take over stderr when there is no log file (bsc#1101499). - Fixed ctdb_mutex_ceph_rados_helper deadlock; (bsc#1102230). - Fixed ntlm authentications with "winbind use default domain = yes"; (bsc#1068059). - Fixed idmap_rid to have primary group other than "Domain Users"; (bsc#1087931).

Topics%20covered

Topics Covered

security advisory moderate update samba software fix SUSE Linux Enterprise CNAME loops

References

#1068059 #1087303 #1087931 #1101499 #1102230

#1116319 #1116320 #1116322 #1116324

Cross- CVE-2018-14629 CVE-2018-16841 CVE-2018-16851

CVE-2018-16853

Affected Products:

SUSE Linux Enterprise Module for Packagehub Subpackages 15

SUSE Linux Enterprise Module for Open Buildservice Development Tools 15

SUSE Linux Enterprise Module for Basesystem 15

SUSE Linux Enterprise High Availability 15

https://www.suse.com/security/cve/CVE-2018-14629.html

https://www.suse.com/security/cve/CVE-2018-16841.html

https://www.suse.com/security/cve/CVE-2018-16851.html

https://www.suse.com/security/cve/CVE-2018-16853.html

https://bugzilla.suse.com/1068059

https://bugzilla.suse.com/1087303

https://bugzilla.suse.com/1087931

https://bugzilla.suse.com/1101499

Announcement ID: SUSE-SU-2018:4066-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate update samba software fix SUSE Linux Enterprise CNAME loops

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here