[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[PATCH 0/1] Samba security update

From: Leo Famulari
Subject: [PATCH 0/1] Samba security update
Date: Tue, 12 Apr 2016 19:45:25 -0400

There is a security update of Samba: version 4.3.7 and a regression fix 
in 4.3.8 [0]. I have updated our package to version 4.3.8 with commit

This update addresses the following vulnerabilities:

o  CVE-2015-5370 (Multiple errors in DCE-RPC code)

o  CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)

o  CVE-2016-2111 (NETLOGON Spoofing Vulnerability)

o  CVE-2016-2112 (LDAP client and server don't enforce integrity)

o  CVE-2016-2113 (Missing TLS certificate validation)

o  CVE-2016-2114 ("server signing = mandatory" not enforced)

o  CVE-2016-2115 (SMB IPC traffic is not integrity protected)

o  CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)

Please update your installations.


Leo Famulari (1):
  gnu: samba: Update to 4.3.8.

 gnu/packages/samba.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)


reply via email to

[Prev in Thread] Current Thread [Next in Thread]