Advisories » MGASA-2017-0326

Updated samba packages fix security vulnerability

Publication date: 03 Sep 2017
Modification date: 03 Sep 2017
Type: security
Affected Mageia releases : 6
CVE: CVE-2017-11103

Description

Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered that
Samba clients incorrectly trusted unauthenticated portions of Kerberos
tickets. A remote attacker could use this to impersonate trusted network
servers or perform other attacks (CVE-2017-11103).

The samba package has been updated to version 4.6.7, fixing this issue
and several other bugs.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=21482
• https://www.samba.org/samba/security/CVE-2017-11103.html
• https://www.samba.org/samba/history/samba-4.6.6.html
• https://www.samba.org/samba/history/samba-4.6.7.html
• https://usn.ubuntu.com/usn/usn-3353-2/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11103

SRPMS

6/core

• samba-4.6.7-1.mga6