Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 Kernel Important Security Fix for net/can 2026-f1fc7772c3

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Nuclei Important Cross-site Scripting DoS Threat 2026-d36ca2dd19

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 perl-Crypt-OpenSSL-X509 Important Fix CVE-2026-58101

Calendar White Jul 21, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 rust-syslog Critical Path Traversal DoS Vuln 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Rust RPKI Critical Path Traversal Issues Fix 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Routinator Important Security Fixes CVE-2026-49232 to 49235

Calendar White Jul 21, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 rust-fern Important Path Traversal Fix Advisory 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 Kernel Important Net CAN Issue Fix Advisory 2026-2dd8b600bb

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 btrbk Critical Update Snapshot Tool Fix CVE-2026-62943

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -1 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryFedoracritical fix

Fedora 40: 2024-900475e0f7 Critical: Netatalk Multiple Fixes

Security fix for CVE-2024-38439, CVE-2024-38440, and CVE-2024-38441. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-900475e0f7 2024-07-09 01:53:44.500984 -------------------------------------------------------------------------------- Name : netatalk Product : Fedora 40 Version : 3.2.1 Release : 1.fc40 URL : https://netatalk.io/ Summary : Open Source Apple Filing Protocol(AFP) File Server Description : Netatalk is a freely-available Open Source AFP file server. A *NIX/*BSD system running Netatalk is capable of serving many Macintosh clients simultaneously as an AppleShare file server (AFP). -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2024-38439, CVE-2024-38440, and CVE-2024-38441 -------------------------------------------------------------------------------- ChangeLog: * Sun Jun 30 2024 Andrew Bauer - 5:3.2.1-1 - 3.2.1 release, fixes CVE-2024-38439, CVE-2024-38440, and CVE-2024-38441 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2292817 - CVE-2024-38439 CVE-2024-38441 CVE-2024-38440 netatalk: multiple vulnerabilities https://bugzilla.redhat.com/show_bug.cgi?id=2292817 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-900475e0f7' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . A variety of security updates introduced for netatalk in Fedora 40 tackling severe vulnerabilities highlighted in the latest updates.. Fedora Update, Netatalk Fix, Open Source Security. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jul 09, 2024 •Critical Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryFedorasecurity fix

Fedora 38: FEDORA-2023-cec97f7b5d Moderate: netatalk Security Fix

3.1.18 release Security fix for CVE-2022-22995. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-cec97f7b5d 2023-10-14 01:30:50.983256 -------------------------------------------------------------------------------- Name : netatalk Product : Fedora 38 Version : 3.1.18 Release : 1.fc38 URL : https://netatalk.io/ Summary : Open Source Apple Filing Protocol(AFP) File Server Description : Netatalk is a freely-available Open Source AFP file server. A *NIX/*BSD system running Netatalk is capable of serving many Macintosh clients simultaneously as an AppleShare file server (AFP). -------------------------------------------------------------------------------- Update Information: 3.1.18 release Security fix for CVE-2022-22995 -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 5 2023 Andrew Bauer - 5:3.1.18-1 - 3.1.18 release - Fixes CVE-2022-22995 * Thu Sep 28 2023 Andrew Bauer - 5:3.1.17-2 - buildrequire mariadb-connector-c-devel for all but el7 - minor changes to other specfile conditionals -------------------------------------------------------------------------------- References: [ 1 ] Bug #2069298 - CVE-2022-22995 netatalk: default configuration allows the arbitrary writing of files https://bugzilla.redhat.com/show_bug.cgi?id=2069298 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-cec97f7b5d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Critical patch for Fedora 38 netatalk 3.1.18 targeting CVE-2022-22995 now available. Update for enhanced protection.. Fedora Security Update, Netatalk Fix, Open Source File Server, CVE-2022-22995. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 14, 2023 •Important Fedora
Banner 2 1028x280 1708121730 1 1771599631
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorycriticalFedora

Fedora 37: FEDORA-2023-ef901c862c Critical Netatalk File Server Fix

3.1.18 release Security fix for CVE-2022-22995. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-ef901c862c 2023-10-14 01:26:08.208325 -------------------------------------------------------------------------------- Name : netatalk Product : Fedora 37 Version : 3.1.18 Release : 1.fc37 URL : https://netatalk.io/ Summary : Open Source Apple Filing Protocol(AFP) File Server Description : Netatalk is a freely-available Open Source AFP file server. A *NIX/*BSD system running Netatalk is capable of serving many Macintosh clients simultaneously as an AppleShare file server (AFP). -------------------------------------------------------------------------------- Update Information: 3.1.18 release Security fix for CVE-2022-22995 -------------------------------------------------------------------------------- ChangeLog: * Thu Oct 5 2023 Andrew Bauer - 5:3.1.18-1 - 3.1.18 release - Fixes CVE-2022-22995 * Thu Sep 28 2023 Andrew Bauer - 5:3.1.17-2 - buildrequire mariadb-connector-c-devel for all but el7 - minor changes to other specfile conditionals -------------------------------------------------------------------------------- References: [ 1 ] Bug #2069298 - CVE-2022-22995 netatalk: default configuration allows the arbitrary writing of files https://bugzilla.redhat.com/show_bug.cgi?id=2069298 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-ef901c862c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . To secure Fedora 37 against CVE-2022-22995, run 'sudo dnf update netatalk' in the terminal to install the latest security update available. netatalk security update,Fedora update advisory,open source security. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Oct 14, 2023 •Critical Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryupdatecritical

Fedora 34: FEDORA-2021-6b5e3f7b3e Important: Samba 4.12.15 Security Fix

Update to Samba 4.12.15 - Security fixes for CVE-2021-20254. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-7026246ea9 2021-05-08 01:10:02.820026 --------------------------------------------------------------------------------Name : samba Product : Fedora 32 Version : 4.12.15 Release : 0.fc32 URL : Summary : Server and Client software to interoperate with Windows machines Description : Samba is the standard Windows interoperability suite of programs for Linux and Unix. --------------------------------------------------------------------------------Update Information: Update to Samba 4.12.15 - Security fixes for CVE-2021-20254 --------------------------------------------------------------------------------ChangeLog: * Thu Apr 29 2021 Guenther Deschner - 4.12.15-0 - Update to Samba 4.12.15 - resolves: #1949442, #1955027 - Security fixes for CVE-2021-20254 --------------------------------------------------------------------------------References: [ 1 ] Bug #1949442 - CVE-2021-20254 samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token https://bugzilla.redhat.com/show_bug.cgi?id=1949442 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-7026246ea9' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an emailto This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . The recent update of Samba 4.12.15 includes essential security patches addressing vulnerabilities in Fedora 32; prompt action advised.. Fedora Update 2021,Samba Security Fixes,Fedora 32 Update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 07, 2021 •Important Fedora
Banner 2 1028x280 1708121730 1 1771599631
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebiansamba

Debian: DSA-4513-1 Critical Samba Permission Escape Issue

Stefan Metzmacher discovered a flaw in Samba, a SMB/CIFS file, print, and login server for Unix. Specific combinations of parameters and permissions can allow user to escape from the share path definition and see the complete '/' filesystem. Unix permission checks in the kernel . - ------------------------------------------------------------------------- Debian Security Advisory DSA-4513-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso September 03, 2019 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : samba CVE ID : CVE-2019-10197 Stefan Metzmacher discovered a flaw in Samba, a SMB/CIFS file, print, and login server for Unix. Specific combinations of parameters and permissions can allow user to escape from the share path definition and see the complete '/' filesystem. Unix permission checks in the kernel are still enforced. Details can be found in the upstream advisory at For the stable distribution (buster), this problem has been fixed in version 2:4.9.5+dfsg-5+deb10u1. We recommend that you upgrade your samba packages. For the detailed security status of samba please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/samba Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Enhance samba installation to resolve a vulnerability permitting user access to the complete '/' directory structure on Debian.. Debian Samba Security Update, Permission Escape Flaw, Samba DSA-4513-1. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 03, 2019 •Critical Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorysecurity issuecritical

Debian: DSA-3740-1 Critical: Samba Multiple Security Threats

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues: . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3740-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso December 19, 2016 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : samba CVE ID : CVE-2016-2119 CVE-2016-2123 CVE-2016-2125 CVE-2016-2126 Debian Bug : 830195 Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2016-2119 Stefan Metzmacher discovered that client-side SMB2/3 required signing can be downgraded, allowing a man-in-the-middle attacker to impersonate a server being connected to by Samba, and return malicious results. CVE-2016-2123 Trend Micro's Zero Day Initiative and Frederic Besler discovered that the routine ndr_pull_dnsp_name, used to parse data from the Samba Active Directory ldb database, contains an integer overflow flaw, leading to an attacker-controlled memory overwrite. An authenticated user can take advantage of this flaw for remote privilege escalation. CVE-2016-2125 Simo Sorce of Red Hat discovered that the Samba client code always requests a forwardable ticket when using Kerberos authentication. A target server, which must be in the current or trusted domain/realm, is given a valid general purpose Kerberos "Ticket Granting Ticket" (TGT), which can be used to fully impersonate the authenticated user or service. CVE-2016-2126 Volker Lendecke discovered several flaws in the Kerberos PAC validation. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket due to incorrect handling of the PAC checksum. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions. For the stable distribution (jessie), these problems have been fixed in version 2:4.2.14+dfsg-0+deb8u2. In addition, this update contains several changes originally targeted for the upcoming jessie point release. We recommend that you upgrade your samba packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . - ------------------------------------------------------------------------- Debian Security Advisory. vulnerabilities, samba, smb/cifs, print, login, server. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Dec 19, 2016 •Critical Debian
Banner 2 1028x280 1708121730 1 1771599631
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorydenial of servicesecurity update

Scientific Linux SL5.x: SLSA-2014:0866-1 Moderate Samba Update

Moderate: samba and samba3x security update. Date: Wed, 9 Jul 2014 18:43:07 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Moderate: samba and samba3x on SL5.x, SL6.x i386/srpm/x86_64 MIME-Version: 1.0 Synopsis: Moderate: samba and samba3x security update Advisory ID: SLSA-2014:0866-1 Issue Date: 2014-07-09 CVE Numbers: CVE-2014-0244 CVE-2014-3493 -- A denial of service flaw was found in the way the sys_recvfile() function of nmbd, the NetBIOS message block daemon, processed non-blocking sockets. An attacker could send a specially crafted packet that, when processed, would cause nmbd to enter an infinite loop and consume an excessive amount of CPU time. (CVE-2014-0244) It was discovered that smbd, the Samba file server daemon, did not properly handle certain files that were stored on the disk and used a valid Unicode character in the file name. An attacker able to send an authenticated non-Unicode request that attempted to read such a file could cause smbd to crash. (CVE-2014-3493) After installing this update, the smb service will be restarted automatically. -- SL5 x86_64 samba3x-3.6.6-0.140.el5_10.x86_64.rpm samba3x-domainjoin-gui-3.6.6-0.140.el5_10.x86_64.rpm samba3x-winbind-3.6.6-0.140.el5_10.i386.rpm samba3x-doc-3.6.6-0.140.el5_10.x86_64.rpm samba3x-client-3.6.6-0.140.el5_10.x86_64.rpm samba3x-winbind-devel-3.6.6-0.140.el5_10.i386.rpm samba3x-common-3.6.6-0.140.el5_10.x86_64.rpm samba3x-winbind-devel-3.6.6-0.140.el5_10.x86_64.rpm samba3x-winbind-3.6.6-0.140.el5_10.x86_64.rpm samba3x-swat-3.6.6-0.140.el5_10.x86_64.rpm samba3x-debuginfo-3.6.6-0.140.el5_10.i386.rpm samba3x-debuginfo-3.6.6-0.140.el5_10.x86_64.rpm i386 samba3x-winbind-3.6.6-0.140.el5_10.i386.rpm samba3x-domainjoin-gui-3.6.6-0.140.el5_10.i386.rpm samba3x-doc-3.6.6-0.140.el5_10.i386.rpm samba3x-winbind-devel-3.6.6-0.140.el5_10.i386.rpm samba3x-3.6.6-0.140.el5_10.i386.rpm samba3x-client-3.6.6-0.140.el5_10.i386.rpm samba3x-swat-3.6.6-0.140.el5_10.i386.rpm samba3x-common-3.6.6-0.140.el5_10.i386.rpm samba3x-debuginfo-3.6.6-0.140.el5_10.i386.rpm srpm samba3x-3.6.6-0.140.el5_10.src.rpm noarch samba3x-debuginfo-3.6.6-0.140.el5_10.x86_64.rpm samba3x-debuginfo-3.6.6-0.140.el5_10.i386.rpm SL6 x86_64 samba-common-3.6.9-169.el6_5.i686.rpm samba-winbind-clients-3.6.9-169.el6_5.x86_64.rpm libsmbclient-devel-3.6.9-169.el6_5.x86_64.rpm samba-doc-3.6.9-169.el6_5.x86_64.rpm samba-3.6.9-169.el6_5.x86_64.rpm libsmbclient-devel-3.6.9-169.el6_5.i686.rpm samba-winbind-3.6.9-169.el6_5.x86_64.rpm libsmbclient-3.6.9-169.el6_5.x86_64.rpm libsmbclient-3.6.9-169.el6_5.i686.rpm samba-domainjoin-gui-3.6.9-169.el6_5.x86_64.rpm samba-swat-3.6.9-169.el6_5.x86_64.rpm samba-client-3.6.9-169.el6_5.x86_64.rpm samba-winbind-krb5-locator-3.6.9-169.el6_5.x86_64.rpm samba-winbind-devel-3.6.9-169.el6_5.x86_64.rpm samba-winbind-clients-3.6.9-169.el6_5.i686.rpm samba-winbind-devel-3.6.9-169.el6_5.i686.rpm samba-common-3.6.9-169.el6_5.x86_64.rpm samba-debuginfo-3.6.9-169.el6_5.i686.rpm samba-debuginfo-3.6.9-169.el6_5.x86_64.rpm srpm samba-3.6.9-169.el6_5.src.rpm i386 samba-common-3.6.9-169.el6_5.i686.rpm samba-3.6.9-169.el6_5.i686.rpm libsmbclient-devel-3.6.9-169.el6_5.i686.rpm samba-doc-3.6.9-169.el6_5.i686.rpm samba-swat-3.6.9-169.el6_5.i686.rpm libsmbclient-3.6.9-169.el6_5.i686.rpm samba-winbind-3.6.9-169.el6_5.i686.rpm samba-winbind-krb5-locator-3.6.9-169.el6_5.i686.rpm samba-winbind-clients-3.6.9-169.el6_5.i686.rpm samba-winbind-devel-3.6.9-169.el6_5.i686.rpm samba-client-3.6.9-169.el6_5.i686.rpm samba-domainjoin-gui-3.6.9-169.el6_5.i686.rpm samba-debuginfo-3.6.9-169.el6_5.i686.rpm noarch samba-debuginfo-3.6.9-169.el6_5.x86_64.rpm samba-debuginfo-3.6.9-169.el6_5.i686.rpm - Scientific Linux Development Team . Stay informed about the recent samba and samba3x security patch that tackles denial of service vulnerabilities and crash problems in Scientific Linux.. samba security advisory, Scientific Linux update,samba3x patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 09, 2014 •Important Scientific Linux
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianremote access

Debian: DSA 600-1 Moderate: Samba Arbitrary File Access Issue

A vulnerability has been discovered in samba, a commonly used LanManager-like file and printer server for Unix. A remote attacker may be able to gain access to files which exist outside of the share's defined path.. -------------------------------------------------------------------------- Debian Security Advisory DSA 600-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Martin Schulze October 7th, 2004 Debian -- Debian security FAQ -------------------------------------------------------------------------- Package : samba Vulnerability : arbitrary file access Problem-Type : remote Debian-specific: no CVE ID : CAN-2004-0815 A vulnerability has been discovered in samba, a commonly used LanManager-like file and printer server for Unix. A remote attacker may be able to gain access to files which exist outside of the share's defined path. Such files must still be readable by the account used for the connection, though. For the stable distribution (woody) this problem has been fixed in version 2.2.3a-14.1. In the unstable (sid) and testing (sarge) distributions this problem was not present. We recommend that you upgrade your samba packages. Upgrade Instructions -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody -------------------------------- Source archives: Size/MD5 checksum: 775 a2af736313501d6f44be6cef7cc88cbf Size/MD5 checksum: 107344 bdb474462e3e9bd35625afabd07807c1 Size/MD5 checksum: 5460531 b6ec2f076af69331535a82b586f55254 Architecture independent components: Size/MD5 checksum: 2446936 257688d1dfb6f99506cbd8a4c24cabbd Alpha architecture: Size/MD5 checksum: 415690 b3dbf67a532d141f790a5d5219185c97 Size/MD5 checksum: 489684 9dcc13fa5fa2a7d7743b7983cb1469d6 Size/MD5 checksum: 600496 8a4794fb364f974dc3de1c8ab739ac4f Size/MD5 checksum: 2956046 046da9998b8fa36ff224863c9cdf9e75 Size/MD5 checksum: 1131434 5ba458f4aff340332586291da917b87e Size/MD5 checksum: 1156050 7da311c482e43a342cd5317cdab62d6b Size/MD5 checksum: 949844 c67ce1367894b077c76239f8a84e3734 Size/MD5 checksum: 623068 1968db82b56c174964b4b74b50dfbd2d Size/MD5 checksum: 1106942 1b0f6f783f8085cc66c2952c71ebc7ac ARM architecture: Size/MD5 checksum: 397050 1f6cdc9091bf0bcc0e71ec62135d14b5 Size/MD5 checksum: 461594 4d4617f3583947a6dca094c65ab5af38 Size/MD5 checksum: 547222 d387f6b71718b986a64b93a2a0917165 Size/MD5 checksum: 2553028 9d26784f9f2ffc5ed666f2587afe611b Size/MD5 checksum: 1023076 da95af57afd726ed8da76b6d2e825f2e Size/MD5 checksum: 1002748 f96a8323c3479cafed063c310f34e4ad Size/MD5 checksum: 831732 38fe5c590e10af901099813254798a6b Size/MD5 checksum: 557864 c33197f9f9c486ee5a0fb91daa37208d Size/MD5 checksum: 974580 ba96e7d882ffdee927f047dc3ba92065 Intel IA-32 architecture: Size/MD5 checksum: 388902 906276eea039d4054dd7b1b523800f78 Size/MD5 checksum: 446362 1e09eaf629f560708ec79eec84724c05 Size/MD5 checksum: 500072 e9c0ecdcb56cfc099f9d4120f6f57055 Size/MD5 checksum: 2417402 540addf76a43c2750e7ffa50fef80c30 Size/MD5 checksum: 993390 af0e79cb8541b5b4d4fdbf9719d85b02 Size/MD5 checksum: 954172 29597c7e90f2494598b901dfabdf3b5f Size/MD5 checksum: 793548 3ed212184d0955c5746df428d009ce66 Size/MD5 checksum: 535486 4dfed7deebfa5b194c6faf06dfc69c23 Size/MD5 checksum: 930504 6fff5fe9036ef173bd203463ac1b989d Intel IA-64 architecture: Size/MD5 checksum: 461722 475b5d8eb28f074377511560fe486f5c Size/MD5 checksum: 553746 a75f6c475b65df643e44a040fe7e711f Size/MD5 checksum: 624886 868c87d3a7d547f5b1bd5a3b59fb5b1b Size/MD5 checksum: 3487698 1f5b87f988b0e6180945f5857b20f8ca Size/MD5 checksum: 1248644 8bbafb3289123e119844273ad0ad2c3d Size/MD5 checksum: 1328518 093f6ce6a584077e9ac22f7477a66e5b Size/MD5 checksum: 1097776 b3027b1fb9ac978708992983f4aaf290 Size/MD5 checksum: 695522 837c034971efe3a8993471e985e6281f Size/MD5 checksum: 1281666 7bcd03f536b8227da0082e18f6af130f HP Precision architecture: Size/MD5 checksum: 419704 b4ab9379f16d68c6d159a3729c786b91 Size/MD5 checksum: 491168 d2f2e84bb69a74ee4b18de1aacf69bb4 Size/MD5 checksum: 589502 cee18a24bec4f6b478631dcc1239570f Size/MD5 checksum: 2791176 d9fba426a9a203d57b544d11e1077ee5 Size/MD5 checksum: 1081648 95e20e8918b294d826994e6c46da7e1b Size/MD5 checksum: 1085052 dbde6a318373ef1c9af8d3880fc64369 Size/MD5 checksum: 901402 8485c014bc31c33b7920f019c723c7f3 Size/MD5 checksum: 589990 d16a1fbb42d65379fd3da176a101681e Size/MD5 checksum: 1060066 25649416cb5bd76c1c13830ae8edcd3b Motorola 680x0 architecture: Size/MD5 checksum: 398770 d78c6f2e700781d54f9ecda6eb238526 Size/MD5 checksum: 459864 34dd7b9aa8208dd11eb19b8933c545f6 Size/MD5 checksum: 504522 2c4aa69979372d832b29d0e5827d497a Size/MD5 checksum: 2355244 b94ee6ddff1475c77dd4b86dbe5c7700 Size/MD5 checksum: 982122 dc728b631e3a850664fd9673a3207773 Size/MD5 checksum: 936080 bd30699cb76f232b04a394b19e69bb48 Size/MD5 checksum: 788524 7f6226024eb65e088bcedec669773fda Size/MD5 checksum: 524182 cb378ef731154c0b7ca083ba8498e350 Size/MD5 checksum: 930170 9c890313b5464e84ea94c7139e4a97da Big endian MIPS architecture: Size/MD5 checksum: 396162 19edb24a089ac6e83afa6a8f10a72f32 Size/MD5 checksum: 459410 bf32361476e1532c939e3a8ad564ee91 Size/MD5 checksum: 569610 84f1ef40e4f77b3860797bbfd4598bf5 Size/MD5 checksum: 2803536 72f070e84bdb57ad3c5d06265342c1f2 Size/MD5 checksum: 1078344 e7d8ab8e476d21041102c81523d05df5 Size/MD5 checksum: 1088376 025c89d9df75d98d5d618c6989d6d71c Size/MD5 checksum: 910504 ad6825b95aa8c43613c7029ff7bd7540 Size/MD5 checksum: 581202 cd464144a77cfab1735eb6e196d5529a Size/MD5 checksum: 1027882 f4495e4d24ee836702ca1fb302f40782 Little endian MIPS architecture: Size/MD5 checksum: 392240 9dff38afb6e7c7e02b1261a52de65baa Size/MD5 checksum: 453984 7abcc75b570fdd0b20d5eb2f39423845 Size/MD5 checksum: 562514 d557482aa96c5a8ecfc71017997ba025 Size/MD5 checksum: 2763974 1203017d0285886c0aa77f82f6ffe070 Size/MD5 checksum: 1071496 9e3b73ac5224413d88d245197a03c37b Size/MD5 checksum: 1075858 7579097440fcdf9db5e4ebbf977aa964 Size/MD5 checksum: 897104 09661520c88567906c735dbea2d4bcd9 Size/MD5 checksum: 576680 0ae70f3114073659582ad0f0fee9e756 Size/MD5 checksum: 1015166 679691391af10ae66a6b49e30dad383d PowerPC architecture: Size/MD5 checksum: 408898 80fd1077e68d809732b4a9cbed09e330 Size/MD5 checksum: 475756 d77bfe732ac15518f0c1b401f790328a Size/MD5 checksum: 546358 e1b192f4269192c370e9da96b6b38388 Size/MD5 checksum: 2607540 be1ca9d87728d44d5ce6080cd10a57e4 Size/MD5 checksum: 1036772 a38fefa9ce598ce4270334737c158107 Size/MD5 checksum: 102159643e0b626d06badd64d8cb901d6581ceb Size/MD5 checksum: 852636 746e13c82c1b29bf25f3c22ffd278cb3 Size/MD5 checksum: 561004 ea2ded10c59a8e6dcb1c7a2888e3a941 Size/MD5 checksum: 1001804 7d683d7359587cce2ae19d64494934d7 IBM S/390 architecture: Size/MD5 checksum: 403274 ad2001b54eaadb2a7259c36b2e2a0d75 Size/MD5 checksum: 470064 bfccfe495177f91125c7385b74ab5f93 Size/MD5 checksum: 526738 26190e2be1b643431d98165ac06e2c63 Size/MD5 checksum: 2496222 51a182dc51d5a0752f995188716ee163 Size/MD5 checksum: 1008300 43c82f3ea0952decd6798d9a59c36c3f Size/MD5 checksum: 982812 f7fae37ce569a2588dab37056fae6644 Size/MD5 checksum: 833368 610ed462aa4b1d30d513b1015ef99b79 Size/MD5 checksum: 537872 88905dabb2531bf8fdd6087715ad2b75 Size/MD5 checksum: 965790 e5fa1a609806e9725db2f6b3b8fb0df8 Sun Sparc architecture: Size/MD5 checksum: 400606 71e121da43b0929b596c4b12668c67c8 Size/MD5 checksum: 461986 1ff6cf7a85de91d60b7323d282cabe92 Size/MD5 checksum: 523958 ff18c36c4b095cd42adc5895f0301e6c Size/MD5 checksum: 2513630 66e293e366625e121718521fd989647b Size/MD5 checksum: 1011418 e9308d07b2cb7f0d9cb4f73de3a4dad9 Size/MD5 checksum: 985474 fa7b07fd1a8320123b09b25aebd6fa7c Size/MD5 checksum: 829604 e27e3024f72fec8d5bc17466849a0c2d Size/MD5 checksum: 543734 18c8d40673cde04dd6c38f3ee592d3fd Size/MD5 checksum: 964528 88816d5c74bdc056857a57ccb3d58fde These files will probably be moved into the stable distribution on its next update. --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Critical security flaw identified in Samba on Debian. Immediate update necessary to protect your server.. Debian Security,Samba File Access,Remote Access Vulnerability,Unix Security. . LinuxSecurity.com Team

Calendar%202 Oct 07, 2004 Debian
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics