Summary
[4.4.4-13]
- resolves: #1437816 - Fix krb5 memory cache in libads sasl code
- resolves: #1437741 - Fix CVE-2016-2125, CVE-2016-2126 and CVE-2017-2619
Fixed packages 26
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ctdb | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | ctdb-tests | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | libsmbclient | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | libsmbclient-devel | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | libwbclient | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | libwbclient-devel | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-client | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-client-libs | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-common | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-common-libs | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-common-tools | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-dc | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-dc-libs | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-devel | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-krb5-printing | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-libs | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-pidl | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-python | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-test | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-test-libs | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-vfs-glusterfs | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-winbind | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-winbind-clients | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-winbind-krb5-locator | 0:4.4.4-13.el7_3 |
| Oracle Linux · 7 | samba-winbind-modules | 0:4.4.4-13.el7_3 |
Vulnerabilities 3
-
Medium 6.4
It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos a…
-
Unscored —
Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege At…
-
Unscored —
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access…