Stay Secure with the Latest Linux Advisories

security advisoryfedorabuffer overflow

Fedora 32: FEDORA-2020-1f643c272c Critical: Libntlm Buffer Overflow

Update to security fix 1.6 version. Fixes CVE-2019-17455. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-1f643c272c 2021-02-19 01:14:39.900954 --------------------------------------------------------------------------------Name : libntlm Product : Fedora 32 Version : 1.6 Release : 1.fc32 URL : http://www.nongnu.org/libntlm/ Summary : NTLMv1 authentication library Description : A library for authenticating with Microsoft NTLMV1 challenge-response, derived from Samba sources. --------------------------------------------------------------------------------Update Information: Update to security fix 1.6 version. Fixes CVE-2019-17455 --------------------------------------------------------------------------------ChangeLog: * Sat Oct 31 2020 Kevin Fenzi - 1.6-1 - Update to 1.6. Fixes CVE-2019-17455 * Sat Aug 1 2020 Fedora Release Engineering - 1.5-4 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering - 1.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1768464 - CVE-2019-17455 libntlm: stack-based buffer overflow in buildSmbNtlmAuthRequest in smbutil.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1768464 [ 2 ] Bug #1825591 - libntlm-1.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=1825591 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-1f643c272c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by theFedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Important notice for Fedora 32 concerning the update to the libntlm package, addressing the vulnerability identified as CVE-2019-17455, aimed at improving the security posture.. Fedora Security Update, Libntlm Authentication, Buffer Overflow Fix. . Severity: Critical. LinuxSecurity.com Team

Feb 18, 2021 •Critical Fedora