Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 33: FEDORA-2021-c87ed13391 Critical: cifs-utils Kerberos Auth Leak

Fix for CVE-2021-20208 Update to 6.13 cifs.upcall: fix regression in kerberos mount mount.cifs: fix crash when mount point does not exist ---- Fix for CVE-2021-20208: cifs.upcall kerberos auth leak in container. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-c87ed13391 2021-10-01 01:30:14.427738 --------------------------------------------------------------------------------Name : cifs-utils Product : Fedora 33 Version : 6.13 Release : 3.fc33 URL : Summary : Utilities for mounting and managing CIFS mounts Description : The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. This package contains tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system. --------------------------------------------------------------------------------Update Information: Fix for CVE-2021-20208 Update to 6.13 cifs.upcall: fix regression in kerberos mount mount.cifs: fix crash when mount point does not exist ---- Fix for CVE-2021-20208: cifs.upcall kerberos auth leak in container --------------------------------------------------------------------------------ChangeLog: * Thu Sep 23 2021 Bruno Wolff III - 6.13-3 - Actually use the patches * Thu Sep 23 2021 Bruno Wolff III - 6.13-2 - Pull in a couple of upstream fixes slotted for the next release - fix regression in kerberos mount - fix crash when mount point does not exist * Wed Sep 22 2021 Bruno Wolff III - 6.13-1 - Fix for CVE-2021-20208: cifs.upcall kerberos auth leak in container - get/setcifsacl tools are improved to support changing owner, group and SACLs * Wed Jul 21 2021 Fedora Release Engineering - 6.11-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Tue Jan 26 2021Fedora Release Engineering - 6.11-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-c87ed13391' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . CIFS Tools revised for Fedora 33 fixing kerberos authentication vulnerabilities and restoring mount operations affected by bugs.. Fedora Security Update, CIFS Utilities, Kerberos Auth Leak. . Severity: Critical. LinuxSecurity.com Team

Sep 30, 2021 •Critical Fedora