Stay Vigilant with Timely Linux Security Advisories

Loading...

security advisorysoftware updateDoS

SUSE: 2018:2329-1 Critical Samba Denial of Service Vulnerability Alert

An update that solves one vulnerability and has one errata is now available. . SUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:2329-1 Rating: important References: #1079449 #1103411 Cross-References: CVE-2018-10858 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3-LTSS SUSE Linux Enterprise Point of Sale 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for samba fixes the following issues: The following security issues were fixed: - CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient (bsc#1103411). The following other bugs were fixed: - s3:winbindd: allow a fallback to NTLMSSP for LDAP connections (bsc#1079449) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-samba-13726=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-samba-13726=1 - SUSE Linux Enterprise Server 11-SP3-LTSS: zypper in -t patch slessp3-samba-13726=1 - SUSE Linux Enterprise Point of Sale 11-SP3: zypper in -t patch sleposp3-samba-13726=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-samba-13726=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -tpatch dbgsp3-samba-13726=1 Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): libldb-devel-3.6.3-94.14.2 libnetapi-devel-3.6.3-94.14.2 libnetapi0-3.6.3-94.14.2 libsmbclient-devel-3.6.3-94.14.2 libsmbsharemodes-devel-3.6.3-94.14.2 libsmbsharemodes0-3.6.3-94.14.2 libtalloc-devel-3.6.3-94.14.2 libtdb-devel-3.6.3-94.14.2 libtevent-devel-3.6.3-94.14.2 libwbclient-devel-3.6.3-94.14.2 samba-devel-3.6.3-94.14.2 samba-test-3.6.3-94.14.2 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): ldapsmb-1.34b-94.14.2 libldb1-3.6.3-94.14.2 libsmbclient0-3.6.3-94.14.2 libtalloc2-3.6.3-94.14.2 libtdb1-3.6.3-94.14.2 libtevent0-3.6.3-94.14.2 libwbclient0-3.6.3-94.14.2 samba-3.6.3-94.14.2 samba-client-3.6.3-94.14.2 samba-krb-printing-3.6.3-94.14.2 samba-winbind-3.6.3-94.14.2 - SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64): libsmbclient0-32bit-3.6.3-94.14.2 libtalloc2-32bit-3.6.3-94.14.2 libtdb1-32bit-3.6.3-94.14.2 libtevent0-32bit-3.6.3-94.14.2 libwbclient0-32bit-3.6.3-94.14.2 samba-32bit-3.6.3-94.14.2 samba-client-32bit-3.6.3-94.14.2 samba-winbind-32bit-3.6.3-94.14.2 - SUSE Linux Enterprise Server 11-SP4 (noarch): samba-doc-3.6.3-94.14.2 - SUSE Linux Enterprise Server 11-SP4 (ia64): libsmbclient0-x86-3.6.3-94.14.2 libtalloc2-x86-3.6.3-94.14.2 libtdb1-x86-3.6.3-94.14.2 libtevent0-x86-3.6.3-94.14.2 libwbclient0-x86-3.6.3-94.14.2 samba-client-x86-3.6.3-94.14.2 samba-winbind-x86-3.6.3-94.14.2 samba-x86-3.6.3-94.14.2 - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 s390x x86_64): ldapsmb-1.34b-94.14.2 libldb1-3.6.3-94.14.2 libsmbclient0-3.6.3-94.14.2 libtalloc2-3.6.3-94.14.2 libtdb1-3.6.3-94.14.2 libtevent0-3.6.3-94.14.2 libwbclient0-3.6.3-94.14.2 samba-3.6.3-94.14.2 samba-client-3.6.3-94.14.2 samba-krb-printing-3.6.3-94.14.2 samba-winbind-3.6.3-94.14.2 - SUSE Linux Enterprise Server 11-SP3-LTSS (s390x x86_64): libsmbclient0-32bit-3.6.3-94.14.2 libtalloc2-32bit-3.6.3-94.14.2 libtdb1-32bit-3.6.3-94.14.2 libtevent0-32bit-3.6.3-94.14.2 libwbclient0-32bit-3.6.3-94.14.2 samba-32bit-3.6.3-94.14.2 samba-client-32bit-3.6.3-94.14.2 samba-winbind-32bit-3.6.3-94.14.2 - SUSE Linux Enterprise Server 11-SP3-LTSS (noarch): samba-doc-3.6.3-94.14.2 - SUSE Linux Enterprise Point of Sale 11-SP3 (noarch): samba-doc-3.6.3-94.14.2 - SUSE Linux Enterprise Point of Sale 11-SP3 (i586): ldapsmb-1.34b-94.14.2 libldb1-3.6.3-94.14.2 libsmbclient0-3.6.3-94.14.2 libtalloc2-3.6.3-94.14.2 libtdb1-3.6.3-94.14.2 libtevent0-3.6.3-94.14.2 libwbclient0-3.6.3-94.14.2 samba-3.6.3-94.14.2 samba-client-3.6.3-94.14.2 samba-krb-printing-3.6.3-94.14.2 samba-winbind-3.6.3-94.14.2 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): samba-debuginfo-3.6.3-94.14.2 samba-debugsource-3.6.3-94.14.2 - SUSE Linux Enterprise Debuginfo 11-SP4 (ppc64 s390x x86_64): samba-debuginfo-32bit-3.6.3-94.14.2 - SUSE Linux Enterprise Debuginfo 11-SP4 (ia64): samba-debuginfo-x86-3.6.3-94.14.2 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 s390x x86_64): samba-debuginfo-3.6.3-94.14.2 samba-debugsource-3.6.3-94.14.2 - SUSE Linux Enterprise Debuginfo 11-SP3 (s390x): samba-debuginfo-32bit-3.6.3-94.14.2 References: https://www.suse.com/security/cve/CVE-2018-10858.html https://bugzilla.suse.com/1079449 https://bugzilla.suse.com/1103411 . SUSE Security Patch addresses vulnerabilities in samba; incorporates critical updates and resolutions for input handling deficiencies.. SUSE Linux Update,Samba Security Fix,SUSE Security Advisory. . Severity: Important.LinuxSecurity.com Team

Aug 15, 2018 •Important SuSE

security advisorysecurity issuesamba

SUSE 12-SP3 Advisory SUSE-SU-2018:2319-1 Important Samba Issue

An update that solves one vulnerability and has three fixes is now available. . SUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:2319-1 Rating: important References: #1067700 #1068059 #1087303 #1103411 Cross-References: CVE-2018-10858 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise High Availability 12-SP3 SUSE Linux Enterprise Desktop 12-SP3 SUSE Enterprise Storage 5 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for samba fixes the following issues: The following security vulnerability was fixed: - CVE-2018-10858: Fixed insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); The following other change was made: - s3: winbind: Fix 'winbind normalize names' in wb_getpwsid(); - winbind: honor "winbind use default domain" with empty domain (bsc#1087303) - winbind: do not modify credentials in NTLM passthru (bsc#1068059) - net: fix net ads keytab handling (bsc#1067700) - fix vfs_ceph flock stub Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2018-1554=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-1554=1 - SUSE Linux Enterprise High Availability 12-SP3: zypper in -t patch SUSE-SLE-HA-12-SP3-2018-1554=1 - SUSE Linux Enterprise Desktop12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-1554=1 - SUSE Enterprise Storage 5: zypper in -t patch SUSE-Storage-5-2018-1554=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 ppc64le s390x x86_64): libndr-devel-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-krb5pac-devel-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-nbt-devel-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-standard-devel-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-util-devel-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbclient-devel-4.6.14+git.157.c2d53c2b191-3.29.1 libwbclient-devel-4.6.14+git.157.c2d53c2b191-3.29.1 samba-core-devel-4.6.14+git.157.c2d53c2b191-3.29.1 samba-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-debugsource-4.6.14+git.157.c2d53c2b191-3.29.1 - SUSE Linux Enterprise Server 12-SP3 (aarch64 ppc64le s390x x86_64): libdcerpc-binding0-4.6.14+git.157.c2d53c2b191-3.29.1 libdcerpc-binding0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libdcerpc0-4.6.14+git.157.c2d53c2b191-3.29.1 libdcerpc0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-krb5pac0-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-krb5pac0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-nbt0-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-nbt0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-standard0-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-standard0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libndr0-4.6.14+git.157.c2d53c2b191-3.29.1 libndr0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libnetapi0-4.6.14+git.157.c2d53c2b191-3.29.1 libnetapi0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-credentials0-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-credentials0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-errors0-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-errors0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-hostconfig0-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-hostconfig0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-passdb0-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-passdb0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-util0-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-util0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsamdb0-4.6.14+git.157.c2d53c2b191-3.29.1 libsamdb0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbclient0-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbclient0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbconf0-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbconf0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbldap0-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbldap0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libtevent-util0-4.6.14+git.157.c2d53c2b191-3.29.1 libtevent-util0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libwbclient0-4.6.14+git.157.c2d53c2b191-3.29.1 libwbclient0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-4.6.14+git.157.c2d53c2b191-3.29.1 samba-client-4.6.14+git.157.c2d53c2b191-3.29.1 samba-client-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-debugsource-4.6.14+git.157.c2d53c2b191-3.29.1 samba-libs-4.6.14+git.157.c2d53c2b191-3.29.1 samba-libs-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-winbind-4.6.14+git.157.c2d53c2b191-3.29.1 samba-winbind-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 - SUSE Linux Enterprise Server 12-SP3 (s390x x86_64): libdcerpc-binding0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libdcerpc-binding0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libdcerpc0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libdcerpc0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-krb5pac0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-krb5pac0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-nbt0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-nbt0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-standard0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-standard0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libnetapi0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libnetapi0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-credentials0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-credentials0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-errors0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-errors0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-hostconfig0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-hostconfig0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-passdb0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-passdb0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-util0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-util0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamdb0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamdb0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbclient0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbclient0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbconf0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbconf0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbldap0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbldap0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libtevent-util0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libtevent-util0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libwbclient0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libwbclient0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 samba-client-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 samba-client-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 samba-libs-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 samba-libs-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 samba-winbind-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 samba-winbind-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 - SUSE Linux Enterprise Server 12-SP3 (noarch): samba-doc-4.6.14+git.157.c2d53c2b191-3.29.1 - SUSE Linux Enterprise High Availability 12-SP3 (ppc64le s390x x86_64): ctdb-4.6.14+git.157.c2d53c2b191-3.29.1 ctdb-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-debugsource-4.6.14+git.157.c2d53c2b191-3.29.1 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): libdcerpc-binding0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libdcerpc-binding0-4.6.14+git.157.c2d53c2b191-3.29.1 libdcerpc-binding0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libdcerpc-binding0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libdcerpc0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libdcerpc0-4.6.14+git.157.c2d53c2b191-3.29.1 libdcerpc0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libdcerpc0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-krb5pac0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-krb5pac0-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-krb5pac0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-krb5pac0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-nbt0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-nbt0-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-nbt0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-nbt0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-standard0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-standard0-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-standard0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr-standard0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libndr0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr0-4.6.14+git.157.c2d53c2b191-3.29.1 libndr0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libndr0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libnetapi0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libnetapi0-4.6.14+git.157.c2d53c2b191-3.29.1 libnetapi0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libnetapi0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-credentials0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-credentials0-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-credentials0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-credentials0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-errors0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-errors0-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-errors0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-errors0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-hostconfig0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-hostconfig0-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-hostconfig0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-hostconfig0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-passdb0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-passdb0-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-passdb0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-passdb0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-util0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-util0-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-util0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamba-util0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsamdb0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamdb0-4.6.14+git.157.c2d53c2b191-3.29.1 libsamdb0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsamdb0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbclient0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbclient0-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbclient0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbclient0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbconf0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbconf0-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbconf0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbconf0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbldap0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbldap0-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbldap0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libsmbldap0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libtevent-util0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libtevent-util0-4.6.14+git.157.c2d53c2b191-3.29.1 libtevent-util0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libtevent-util0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 libwbclient0-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libwbclient0-4.6.14+git.157.c2d53c2b191-3.29.1 libwbclient0-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 libwbclient0-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-4.6.14+git.157.c2d53c2b191-3.29.1 samba-client-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 samba-client-4.6.14+git.157.c2d53c2b191-3.29.1 samba-client-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 samba-client-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-debugsource-4.6.14+git.157.c2d53c2b191-3.29.1 samba-libs-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 samba-libs-4.6.14+git.157.c2d53c2b191-3.29.1 samba-libs-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 samba-libs-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-winbind-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 samba-winbind-4.6.14+git.157.c2d53c2b191-3.29.1 samba-winbind-debuginfo-32bit-4.6.14+git.157.c2d53c2b191-3.29.1 samba-winbind-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 - SUSE Linux Enterprise Desktop 12-SP3 (noarch): samba-doc-4.6.14+git.157.c2d53c2b191-3.29.1 - SUSE Enterprise Storage 5 (aarch64 x86_64): ctdb-4.6.14+git.157.c2d53c2b191-3.29.1 ctdb-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-ceph-4.6.14+git.157.c2d53c2b191-3.29.1 samba-ceph-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-debuginfo-4.6.14+git.157.c2d53c2b191-3.29.1 samba-debugsource-4.6.14+git.157.c2d53c2b191-3.29.1 References: https://www.suse.com/security/cve/CVE-2018-10858.html https://bugzilla.suse.com/1067700 https://bugzilla.suse.com/1068059 https://bugzilla.suse.com/1087303 https://bugzilla.suse.com/1103411 . SUSE Security Patch: Addresses critical samba vulnerability with high severity. Refer to the installation guide for more details.. SUSE Security Update,samba security patch,linux update,security issues,system vulnerability. . Severity: Important. LinuxSecurity.com Team

Aug 14, 2018 •Important SuSE

security advisorycriticalDebian

Debian: DSA-1985-1 Critical: Sendmail SSL Spoofing Threat

It was discovered that sendmail, a Mail Transport Agent, does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate. This allows an attacker to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and to bypass intended . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1985-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Giuseppe Iuculano January 31, 2010 http://www.debian.org/security/faq - ------------------------------------------------------------------------ Package : sendmail Vulnerability : insufficient input validation Problem type : remote Debian-specific: no CVE ID : CVE-2009-4565 Debian bug : 564581 It was discovered that sendmail, a Mail Transport Agent, does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate. This allows an attacker to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority. For the oldstable distribution (etch), this problem has been fixed in version 8.13.8-3+etch1 For the stable distribution (lenny), this problem has been fixed in version 8.14.3-5+lenny1 For the unstable distribution (sid), this problem has been fixed in version 8.14.3-9.1, and will migrate to the testing distribution (squeeze) shortly. We recommend that you upgrade your sendmail package. Upgrade instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-getupgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian (oldstable) - ------------------ Oldstable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc. Source archives: Size/MD5 checksum: 369120 db03c2498a360f4da02be0e44facca57 Size/MD5 checksum: 949 5252fa5d6c477d90f9474f999035f959 Size/MD5 checksum: 1995868 bcdd005ae02fdb0ecef2d6b21ac44e5d Architecture independent packages: Size/MD5 checksum: 284068 65ef6467d6c85ef90f8e1bb9a0ce3eef Size/MD5 checksum: 698342 466aaa8a9cf452943549a3403f869df9 Size/MD5 checksum: 196848 2557652c4c66c3db1f1467272b1c0dfc Size/MD5 checksum: 345118 8636e42323c07d63fd145cd5329d09b1 alpha architecture (DEC Alpha) Size/MD5 checksum: 202704 bba5c73b5da9971f8aee68b000e9b748 Size/MD5 checksum: 262668 26794af48fbdbaf3daac51f7b3478cad Size/MD5 checksum: 196278 5cbc296b501b2575d47f1a6201580c28 Size/MD5 checksum: 231818 53e7d4f9ba38f266457b1d3d37c9f8eb Size/MD5 checksum: 322192 bee24998a6e6db033f0753fe3fd26314 Size/MD5 checksum: 925162 47924bb85a2dbf791b86e1d7e6368b11 amd64 architecture (AMD x86_64 (AMD64)) Size/MD5 checksum: 202258 b13b1a088cb21da832f9125011f051db Size/MD5 checksum: 866764 a0006766d2db53fc31e5326730c4d243 Size/MD5 checksum: 300978 8d407fdf40114121dfc16dc8c6416d54 Size/MD5 checksum: 196254 2e550571bf2441c2fc1271323a4619d6 Size/MD5 checksum: 261332 a8394f8f93c23ec655bab75376b7bb07 Size/MD5 checksum: 229794 faefb63a062f5328b450a8de7e740132 arm architecture (ARM) Size/MD5 checksum: 201918 1798418509ce66dcd7b62e06373357fd Size/MD5 checksum: 196266 66a8e56ebdb6fbcb4c7db7af17d6678d Size/MD5 checksum: 857542 437edd61ab05ab2913cdb403dca51b51 Size/MD5 checksum: 288470 c28bad3e1c9ad1e7ae5dcb2e64d72393 Size/MD5 checksum: 229324e0d3bde1c7f8fed9dba3c8d0d0ef8c56 Size/MD5 checksum: 256846 29b4c31fcaf597be305e480c2df8df43 hppa architecture (HP PA RISC) Size/MD5 checksum: 233760 25b7a4b659501c920ca3c8f89521dcea Size/MD5 checksum: 202986 068bb27595c517133e2ab3d9b0dd4709 Size/MD5 checksum: 258902 afe3011bd08f3ce3c520b301bce7702f Size/MD5 checksum: 196266 c8cca90f819ddf244ad9a4ee520297b7 Size/MD5 checksum: 924806 231cf507f97386af28667ea786c2eac1 Size/MD5 checksum: 301434 7c9c9bf73a91a74cbccf3d6087b06d2b i386 architecture (Intel ia32) Size/MD5 checksum: 258810 405f1653150b3779525faaedf5e483c3 Size/MD5 checksum: 830184 d0e8b06dbfe54a312dce8c49c35fccbb Size/MD5 checksum: 227812 8f497b7372c3d0138326869aac7f6092 Size/MD5 checksum: 292662 b2304bc7e4180865d044c98e021c055f Size/MD5 checksum: 202390 3cb4995e95000339fa091cdff80a8571 Size/MD5 checksum: 196358 25962ad5d0475e05ef61daf754c43492 ia64 architecture (Intel ia64) Size/MD5 checksum: 196272 1a4649feebed2e3d6e654a6516355317 Size/MD5 checksum: 203786 8b5604817c67e12625779827baca9c96 Size/MD5 checksum: 268910 4122a2e311591bc377908e16d4964ec6 Size/MD5 checksum: 245750 257adcdb15adbf6e7c704ee94cacb2d3 Size/MD5 checksum: 338558 7f4bf9abb4ca3b7cbe6dcb892d55e8b4 Size/MD5 checksum: 1213554 c85694d0f4145562cdcddf0b70eb3b40 mipsel architecture (MIPS (Little Endian)) Size/MD5 checksum: 900128 34de9d8996fc53833922ba9e612880ea Size/MD5 checksum: 196274 5334f2952f7dad6402c46a1cbd68f064 Size/MD5 checksum: 259490 dd05b7275508cc9f97099fd6890d71b4 Size/MD5 checksum: 300788 9bfebccccc9bc027127cf1fdc0e3502a Size/MD5 checksum: 202458 d25a9b6359b1d35e9611badaf09e04f9 Size/MD5 checksum: 232030 8846d9e597c3ee7cd57cc1ba78c4241d powerpc architecture (PowerPC) Size/MD5 checksum: 261128 6a7690e9fb192d0dc148f948d7f21c05 Size/MD5 checksum: 294652 e4fbbac48ceb05fe9fa5b6154dce77c1 Size/MD5 checksum: 871652 3d1d31daf570415cc1e278e442b93656 Size/MD5 checksum: 231294 e317ee912808e3f0f30682403bd675dd Size/MD5 checksum: 202370 df50ecc14c84b0f93fbea715047bbabb Size/MD5 checksum: 196266 2c7092a7853b5a6e931560d0e89e9c3a s390 architecture (IBM S/390) Size/MD5 checksum: 196272 029993e64cec3aa0145772e3bff7bd8a Size/MD5 checksum: 260170 36fe7f0d94a81e4d6ff923f90a26682b Size/MD5 checksum: 300854 4d96568bc19fcee5ebcee7d4b8212756 Size/MD5 checksum: 202056 fe8d9920bc011553940f43329a47480b Size/MD5 checksum: 234484 9f070d5724172abceb604a19aa35baa9 Size/MD5 checksum: 902004 c2b20e2e9dbe18afa1252e663f5ae498 sparc architecture (Sun SPARC/UltraSPARC) Size/MD5 checksum: 227492 d0025442fcc924a8fb9a5df2a85f5c21 Size/MD5 checksum: 196288 1959a6c733e0b0a060f55ea4a8dc5322 Size/MD5 checksum: 829574 193136dbfc2172cd59b0c4aa88281baa Size/MD5 checksum: 289068 19f3984a8008b8ebae913124187be49a Size/MD5 checksum: 255354 6de39f19bf79eb0823419909aa03dd4a Size/MD5 checksum: 202190 3806844fdd0c0bd05368af19c54f778c Debian (stable) - --------------- Stable updates are available for alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc. Source archives: Size/MD5 checksum: 1504 39619f499cdbace73edd78894b931e43 Size/MD5 checksum: 362573 483a8842d3d1f16362dc88f46316ae06 Size/MD5 checksum: 2060171 3476e9655ba95842bee96753c992b99b Architecture independent packages: Size/MD5 checksum: 295472 a881efa0de975702900734bceab7ffb6 Size/MD5 checksum: 833618 1e86303b48590dfbc200e4ccfc9a1dc9 Size/MD5 checksum: 206546 d40fde3590704b097ca683e70ec3227f Size/MD5 checksum: 358922 b444f7633b213d8cbbb68d6f88bb116c alpha architecture (DEC Alpha) Size/MD5 checksum: 253874 937a6749c4eca5f3c73cd7eb12f590b7 Size/MD5 checksum: 345342 d4f1222e459807c679853b2d3d4544ac Size/MD5 checksum: 238306 d7715e99da1682556731960ec4898aaa Size/MD5checksum: 245984 723146743d82a21e145a3a4be48b7c7a Size/MD5 checksum: 967662 42e3ac3322f78c8b55f82d8c5a7c1e14 Size/MD5 checksum: 214954 9949a23986dd49c46c344d4cd13b92e2 amd64 architecture (AMD x86_64 (AMD64)) Size/MD5 checksum: 214596 0ea6517f39733be2e89989274e35052b Size/MD5 checksum: 255178 16ddeb6103b5f5642ce7a87b1056b3e9 Size/MD5 checksum: 246478 0103c1c04d5d74ff7f02d05c5e191c3d Size/MD5 checksum: 328198 a99bf005d2014e4dbfcbe94e3ea46583 Size/MD5 checksum: 976578 4ff12de46d3585642597b932f0ddd1a8 Size/MD5 checksum: 237278 fc0aab20ab63becfead49d0881fe96cb arm architecture (ARM) Size/MD5 checksum: 232234 6276e33285ccec62abfa1423c970edac Size/MD5 checksum: 242310 7d03c4c9304c33d2abe77dfaf7358b6e Size/MD5 checksum: 309174 bbc55ea9c80f938cfc9f28bb1878be6d Size/MD5 checksum: 934464 4fbddf6e1db85b5ff7ee7d161e1d77fd Size/MD5 checksum: 252046 c59709f62c58cb2d781fcd0f02bc3da9 Size/MD5 checksum: 214146 5336a32c7fa7cf43e96879041f265628 armel architecture (ARM EABI) Size/MD5 checksum: 251832 e4941805b21f87bc294379b3ae5f9ed8 Size/MD5 checksum: 308756 5ca468d55abd745c46f5b76cead97223 Size/MD5 checksum: 231792 ce4d6a6bf07a68ed34cfab4f038a675e Size/MD5 checksum: 242814 45e4b790f71916f76ebda012a83001ed Size/MD5 checksum: 214354 bd4e447688160a54aa8bd03122f515ba Size/MD5 checksum: 932044 6c587d57090aadfb32a545b37f00ac93 hppa architecture (HP PA RISC) Size/MD5 checksum: 1039526 6d66e3d82181bdae2fe2c011ad80c395 Size/MD5 checksum: 248882 342439f3654e60f3f28baf27b25b3d94 Size/MD5 checksum: 235596 209f5222150e1ca5472f2a5faf623e7e Size/MD5 checksum: 215360 3a371f41db4ae8ff9e986228cd24cfda Size/MD5 checksum: 321916 ed5b5b513697f26381ac2a66ddce05fe Size/MD5 checksum: 252632 3d3c63808bf9c347235187bfac0decbf i386 architecture (Intel ia32) Size/MD5 checksum: 243262 39e5329ec1fc4e0daabbf06c6934c038 Size/MD5checksum: 214498 35567466e98b5cd66540915448e11cf3 Size/MD5 checksum: 235632 f7facff44a046aca0fda6b71634af2c1 Size/MD5 checksum: 253198 62916ef56fb537fe01a74549dccce69f Size/MD5 checksum: 318478 4d8db5fbb1babd56b13773d657aeecdb Size/MD5 checksum: 927790 e673ebdb9bb42f7af22eabd26cd47314 ia64 architecture (Intel ia64) Size/MD5 checksum: 259046 535ad02335435465eedccbf93c4a9db6 Size/MD5 checksum: 1249794 cbb30d97bbf36890dd46422a4c3b9335 Size/MD5 checksum: 245788 4090c4af51b7b37acbee64773431bf92 Size/MD5 checksum: 253208 c7ead8ea98e7af3022295efe48ff328e Size/MD5 checksum: 215656 fe8e723c804be1324cf4a262cbb77bbb Size/MD5 checksum: 362638 2fb3812587a1c801c0a751c3e7963d63 mips architecture (MIPS (Big Endian)) Size/MD5 checksum: 929562 42c931a18eb21bcef56e92f67e5f03db Size/MD5 checksum: 232678 656cdb78a72c75cbb4b065f30c3f9329 Size/MD5 checksum: 244568 07e6e929be48887f40a7da8952fa8d74 Size/MD5 checksum: 321916 0c683e0403e283bc5b3eb74375c31643 Size/MD5 checksum: 214478 bc4dbf2196f36fe6197dd6b47d0622e8 Size/MD5 checksum: 254604 7d1482ab8f5c5e12dc3ca1ae485dd7f7 mipsel architecture (MIPS (Little Endian)) Size/MD5 checksum: 254008 062866141c0ea336649679387b9680ad Size/MD5 checksum: 214498 678c36c92bfede7ed7f4a22e9963c8a8 Size/MD5 checksum: 930580 1659a1abaa05ee8b87629a03f9fe7ac9 Size/MD5 checksum: 244666 cfd5792d66d9bf4afff3d57b0d07f221 Size/MD5 checksum: 232838 9f45348868591ef374b4456295a15f32 Size/MD5 checksum: 322102 54515b9f45310e86d1d32906df722336 powerpc architecture (PowerPC) Size/MD5 checksum: 974022 1c37948467d4fec4886b8aa99be27a1e Size/MD5 checksum: 255992 90fd40ea3490b44ece28acc8a4fe826b Size/MD5 checksum: 215260 cafb7da0dd2576b3246c4921c97bb43a Size/MD5 checksum: 239168 e563c9a87f92fecd534b32117dbb42f7 Size/MD5 checksum: 321120 6c976e861f549695a0c8e5a6b2e90ca3 Size/MD5 checksum: 247760512627779646f9adfd92971d5cac5dc7 s390 architecture (IBM S/390) Size/MD5 checksum: 250630 f1f9b514708d97773ad74b13f4c4058f Size/MD5 checksum: 1034220 be9222edad8e87af288f562e6e7d466e Size/MD5 checksum: 254240 16ac8e7dc48607fca96c827df56a0f96 Size/MD5 checksum: 324662 b2f5e64b1138a7fe8212c67abf88aaf6 Size/MD5 checksum: 237004 de84239ba51b5649966b963a073a3878 Size/MD5 checksum: 214816 5c01bf333cdfe50b8e3b5501cc7c494a sparc architecture (Sun SPARC/UltraSPARC) Size/MD5 checksum: 214672 a7680df86dc7c11ed7f02232136ae58a Size/MD5 checksum: 234996 5a9c4d48a45d32184670216e80a38f7a Size/MD5 checksum: 313516 885201f32dfd8c5049428085b23ab0f7 Size/MD5 checksum: 977328 03c6b2cbd690fe8b70bffa07581eb178 Size/MD5 checksum: 244848 14b649b4b66b1e229fe85fed85f77915 Size/MD5 checksum: 250876 39dc7ca4b7cd3287c61fc3f893d8a9bf These files will probably be moved into the stable distribution on its next update. - --------------------------------------------------------------------------------- For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Proposed enhancement for postfix to resolve certificate management concerns across various Debian versions, refer to DSA-1985-1.. sendmail, Debian security, SSL threat, remote exploit, security patch. . Severity: Critical. LinuxSecurity.com Team

Jan 31, 2010 •Critical Debian

Stay Secure with the Latest Linux Advisories

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Refine advisories

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Ubuntu 25.10 kmod Critical Algif_aead Privilege Escalation USN-8226-1

Ubuntu 26.04 LTS nginx Critical Denial of Service 2026-42945

Ubuntu 26.04 Docker Critical Security Threats USN-8230-1 CVE-2026-33747

Debian OpenSSH Critical DSA-6204-1 CVE-2026-3497 Remote DoS Execution

Explore Latest Linux Security advisories

SUSE: 2018:2329-1 Critical Samba Denial of Service Vulnerability Alert

SUSE 12-SP3 Advisory SUSE-SU-2018:2319-1 Important Samba Issue

Debian: DSA-1985-1 Critical: Sendmail SSL Spoofing Threat

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Ubuntu 25.10 kmod Critical Algif_aead Privilege Escalation USN-8226-1

Ubuntu 26.04 LTS nginx Critical Denial of Service 2026-42945

Ubuntu 26.04 Docker Critical Security Threats USN-8230-1 CVE-2026-33747

Debian OpenSSH Critical DSA-6204-1 CVE-2026-3497 Remote DoS Execution

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!

Stay Secure with the Latest Linux Advisories

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Refine advisories

severity

Topics

Distro

Published Date

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Explore Latest Linux Security advisories

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Search Topics

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!