Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
100
security advisorycriticalprivilege escalationSUSE: 2021:3649-1 Critical: Samba Privilege Escalation and Auth Issues
An update that fixes three vulnerabilities is now available. . SUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:3649-1 Rating: important References: #1014440 #1192214 #1192284 Cross-References: CVE-2016-2124 CVE-2020-25717 CVE-2021-23192 CVSS scores: CVE-2020-25717 (SUSE): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2021-23192 (SUSE): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise High Availability 12-SP5 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for samba fixes the following issues: - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440). - CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284). - CVE-2021-23192: Fixed dcerpc requests to don't check all fragments against the first auth_state (bsc#1192214). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2021-3649=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-3649=1 - SUSE Linux Enterprise High Availability 12-SP5: zypper in -t patch SUSE-SLE-HA-12-SP5-2021-3649=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64les390x x86_64): libndr-devel-4.10.18+git.339.c912385a5e1-3.41.1 libndr-krb5pac-devel-4.10.18+git.339.c912385a5e1-3.41.1 libndr-nbt-devel-4.10.18+git.339.c912385a5e1-3.41.1 libndr-standard-devel-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-util-devel-4.10.18+git.339.c912385a5e1-3.41.1 libsmbclient-devel-4.10.18+git.339.c912385a5e1-3.41.1 libwbclient-devel-4.10.18+git.339.c912385a5e1-3.41.1 samba-core-devel-4.10.18+git.339.c912385a5e1-3.41.1 samba-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 samba-debugsource-4.10.18+git.339.c912385a5e1-3.41.1 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): libdcerpc-binding0-4.10.18+git.339.c912385a5e1-3.41.1 libdcerpc-binding0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libdcerpc0-4.10.18+git.339.c912385a5e1-3.41.1 libdcerpc0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libndr-krb5pac0-4.10.18+git.339.c912385a5e1-3.41.1 libndr-krb5pac0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libndr-nbt0-4.10.18+git.339.c912385a5e1-3.41.1 libndr-nbt0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libndr-standard0-4.10.18+git.339.c912385a5e1-3.41.1 libndr-standard0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libndr0-4.10.18+git.339.c912385a5e1-3.41.1 libndr0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libnetapi0-4.10.18+git.339.c912385a5e1-3.41.1 libnetapi0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-credentials0-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-credentials0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-errors0-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-errors0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-hostconfig0-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-hostconfig0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-passdb0-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-passdb0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-util0-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-util0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libsamdb0-4.10.18+git.339.c912385a5e1-3.41.1 libsamdb0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libsmbclient0-4.10.18+git.339.c912385a5e1-3.41.1 libsmbclient0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libsmbconf0-4.10.18+git.339.c912385a5e1-3.41.1 libsmbconf0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libsmbldap2-4.10.18+git.339.c912385a5e1-3.41.1 libsmbldap2-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libtevent-util0-4.10.18+git.339.c912385a5e1-3.41.1 libtevent-util0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 libwbclient0-4.10.18+git.339.c912385a5e1-3.41.1 libwbclient0-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 samba-4.10.18+git.339.c912385a5e1-3.41.1 samba-client-4.10.18+git.339.c912385a5e1-3.41.1 samba-client-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 samba-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 samba-debugsource-4.10.18+git.339.c912385a5e1-3.41.1 samba-libs-4.10.18+git.339.c912385a5e1-3.41.1 samba-libs-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 samba-libs-python3-4.10.18+git.339.c912385a5e1-3.41.1 samba-libs-python3-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 samba-winbind-4.10.18+git.339.c912385a5e1-3.41.1 samba-winbind-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 - SUSE Linux Enterprise Server 12-SP5 (s390x x86_64): libdcerpc-binding0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libdcerpc-binding0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libdcerpc0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libdcerpc0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libndr-krb5pac0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libndr-krb5pac0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libndr-nbt0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libndr-nbt0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libndr-standard0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libndr-standard0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libndr0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libndr0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libnetapi0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libnetapi0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-credentials0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-credentials0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-errors0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-errors0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-hostconfig0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-hostconfig0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-passdb0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-passdb0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-util0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsamba-util0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsamdb0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsamdb0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsmbclient0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsmbclient0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsmbconf0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsmbconf0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsmbldap2-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libsmbldap2-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libtevent-util0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libtevent-util0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libwbclient0-32bit-4.10.18+git.339.c912385a5e1-3.41.1 libwbclient0-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 samba-client-32bit-4.10.18+git.339.c912385a5e1-3.41.1 samba-client-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 samba-libs-32bit-4.10.18+git.339.c912385a5e1-3.41.1 samba-libs-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 samba-libs-python3-32bit-4.10.18+git.339.c912385a5e1-3.41.1 samba-libs-python3-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 samba-winbind-32bit-4.10.18+git.339.c912385a5e1-3.41.1 samba-winbind-debuginfo-32bit-4.10.18+git.339.c912385a5e1-3.41.1 - SUSE Linux Enterprise Server 12-SP5 (noarch): samba-doc-4.10.18+git.339.c912385a5e1-3.41.1 - SUSE Linux Enterprise High Availability 12-SP5 (ppc64le s390x x86_64): ctdb-4.10.18+git.339.c912385a5e1-3.41.1 ctdb-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 samba-debuginfo-4.10.18+git.339.c912385a5e1-3.41.1 samba-debugsource-4.10.18+git.339.c912385a5e1-3.41.1 References: https://www.suse.com/security/cve/CVE-2016-2124.html https://www.suse.com/security/cve/CVE-2020-25717.html https://www.suse.com/security/cve/CVE-2021-23192.html https://bugzilla.suse.com/1014440 https://bugzilla.suse.com/1192214 https://bugzilla.suse.com/1192284 . SUSE Security Update addresses vulnerabilities in samba. The update includes severity rating, detailed patching guidance, and a list of impacted products.. SUSE Samba Update,Samba Security Fixes,SUSE Vulnerability Management,Critical Samba Threats. . Severity: Important. LinuxSecurity.com Team
Nov 10, 2021
•Important
SuSE
98
security advisorymoderatered hatRed Hat: RHSA-2009:0355-01 Moderate: Email Client Security Fixes
Updated evolution and evolution-data-server packages that fixes multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team.. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: evolution and evolution-data-server security update Advisory ID: RHSA-2009:0355-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2009:0355.html Issue date: 2009-03-16 CVE Names: CVE-2009-0547 CVE-2009-0582 CVE-2009-0587 ==================================================================== 1. Summary: Updated evolution and evolution-data-server packages that fixes multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Description: Evolution is the integrated collection of e-mail, calendaring, contact management, communications, and personal information management (PIM) tools for the GNOME desktop environment. Evolution Data Server provides a unified back-end for applications which interact with contacts, task and calendar information. Evolution Data Server was originally developed as a back-end for Evolution, but is now used by multiple other applications. Evolution did not properly check the Secure/Multipurpose Internet Mail Extensions (S/MIME) signatures used for public key encryption and signing of e-mail messages. An attacker could use this flaw to spoof a signature by modifying the text of the e-mailmessage displayed to the user. (CVE-2009-0547) It was discovered that evolution did not properly validate NTLM (NT LAN Manager) authentication challenge packets. A malicious server using NTLM authentication could cause evolution to disclose portions of its memory or crash during user authentication. (CVE-2009-0582) Multiple integer overflow flaws which could cause heap-based buffer overflows were found in the Base64 encoding routines used by evolution and evolution-data-server. This could cause evolution, or an application using evolution-data-server, to crash, or, possibly, execute an arbitrary code when large untrusted data blocks were Base64-encoded. (CVE-2009-0587) All users of evolution and evolution-data-server are advised to upgrade to these updated packages, which contain backported patches to correct these issues. All running instances of evolution and evolution-data-server must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 484925 - CVE-2009-0547 evolution-data-server: S/MIME signatures are considered to be valid even for modified messages (MITM) 487685 - CVE-2009-0582 evolution-data-server: insufficient checking of NTLM authentication challenge packets 488226 - CVE-2009-0587 evolution-data-server: integer overflow in base64 encoding functions 6. Package List: Red Hat Enterprise Linux AS version4: Source: i386: evolution-2.0.2-41.el4_7.2.i386.rpm evolution-data-server-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.i386.rpm evolution-debuginfo-2.0.2-41.el4_7.2.i386.rpm evolution-devel-2.0.2-41.el4_7.2.i386.rpm ia64: evolution-2.0.2-41.el4_7.2.ia64.rpm evolution-data-server-1.0.2-14.el4_7.1.ia64.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.ia64.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.ia64.rpm evolution-debuginfo-2.0.2-41.el4_7.2.ia64.rpm evolution-devel-2.0.2-41.el4_7.2.ia64.rpm ppc: evolution-2.0.2-41.el4_7.2.ppc.rpm evolution-data-server-1.0.2-14.el4_7.1.ppc.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.ppc.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.ppc.rpm evolution-debuginfo-2.0.2-41.el4_7.2.ppc.rpm evolution-devel-2.0.2-41.el4_7.2.ppc.rpm s390: evolution-2.0.2-41.el4_7.2.s390.rpm evolution-data-server-1.0.2-14.el4_7.1.s390.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.s390.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.s390.rpm evolution-debuginfo-2.0.2-41.el4_7.2.s390.rpm evolution-devel-2.0.2-41.el4_7.2.s390.rpm s390x: evolution-2.0.2-41.el4_7.2.s390x.rpm evolution-data-server-1.0.2-14.el4_7.1.s390x.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.s390x.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.s390x.rpm evolution-debuginfo-2.0.2-41.el4_7.2.s390x.rpm evolution-devel-2.0.2-41.el4_7.2.s390x.rpm x86_64: evolution-2.0.2-41.el4_7.2.x86_64.rpm evolution-data-server-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-1.0.2-14.el4_7.1.x86_64.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.x86_64.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.x86_64.rpm evolution-debuginfo-2.0.2-41.el4_7.2.x86_64.rpm evolution-devel-2.0.2-41.el4_7.2.x86_64.rpm Red Hat Enterprise Linux Desktop version4: Source: i386: evolution-2.0.2-41.el4_7.2.i386.rpm evolution-data-server-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.i386.rpm evolution-debuginfo-2.0.2-41.el4_7.2.i386.rpm evolution-devel-2.0.2-41.el4_7.2.i386.rpm x86_64: evolution-2.0.2-41.el4_7.2.x86_64.rpm evolution-data-server-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-1.0.2-14.el4_7.1.x86_64.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.x86_64.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.x86_64.rpm evolution-debuginfo-2.0.2-41.el4_7.2.x86_64.rpm evolution-devel-2.0.2-41.el4_7.2.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: evolution-2.0.2-41.el4_7.2.i386.rpm evolution-data-server-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.i386.rpm evolution-debuginfo-2.0.2-41.el4_7.2.i386.rpm evolution-devel-2.0.2-41.el4_7.2.i386.rpm ia64: evolution-2.0.2-41.el4_7.2.ia64.rpm evolution-data-server-1.0.2-14.el4_7.1.ia64.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.ia64.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.ia64.rpm evolution-debuginfo-2.0.2-41.el4_7.2.ia64.rpm evolution-devel-2.0.2-41.el4_7.2.ia64.rpm x86_64: evolution-2.0.2-41.el4_7.2.x86_64.rpm evolution-data-server-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-1.0.2-14.el4_7.1.x86_64.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.x86_64.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.x86_64.rpm evolution-debuginfo-2.0.2-41.el4_7.2.x86_64.rpm evolution-devel-2.0.2-41.el4_7.2.x86_64.rpm Red Hat Enterprise Linux WS version4: Source: i386: evolution-2.0.2-41.el4_7.2.i386.rpm evolution-data-server-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.i386.rpm evolution-debuginfo-2.0.2-41.el4_7.2.i386.rpm evolution-devel-2.0.2-41.el4_7.2.i386.rpm ia64: evolution-2.0.2-41.el4_7.2.ia64.rpm evolution-data-server-1.0.2-14.el4_7.1.ia64.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.ia64.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.ia64.rpm evolution-debuginfo-2.0.2-41.el4_7.2.ia64.rpm evolution-devel-2.0.2-41.el4_7.2.ia64.rpm x86_64: evolution-2.0.2-41.el4_7.2.x86_64.rpm evolution-data-server-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-1.0.2-14.el4_7.1.x86_64.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.i386.rpm evolution-data-server-debuginfo-1.0.2-14.el4_7.1.x86_64.rpm evolution-data-server-devel-1.0.2-14.el4_7.1.x86_64.rpm evolution-debuginfo-2.0.2-41.el4_7.2.x86_64.rpm evolution-devel-2.0.2-41.el4_7.2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2009-0547 https://www.cve.org/CVERecord?id=CVE-2009-0582 https://www.cve.org/CVERecord?id=CVE-2009-0587 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2009 Red Hat, Inc. . Important revisions released for Red Hat's evolution and evolution-data-server, targeting moderate vulnerabilities.. Red Hat Updates, Evolution Security, Data Server Updates, Moderate Fixes, Email Client Issues. . LinuxSecurity.com Team
Mar 16, 2009
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!