FEDORA-2019-534b7929b7 — security update for samba

obsolete

samba-4.11.2-0.fc31

FEDORA-2019-534b7929b7 created by gd 6 years ago for Fedora 31

Update to Samba 4.11.2 - Security fixes for CVE-2019-10218, CVE-2019-14833

Since MIT Kerberos deprecated use of DES encryption type, restore Samba AD domain controller functionality by not using DES encryption keys. Only AES and RC4 keys would work.

This update has been submitted for testing by gd.

6 years ago

This update's test gating status has been changed to 'waiting'.

6 years ago

This update has obsoleted samba-4.11.1-1.fc31, and has inherited its bugs and notes.

6 years ago

This update's test gating status has been changed to 'ignored'.

6 years ago

asn provided feedback 6 years ago

karma

BZ#1757071 Deploy new samba DC cause "setup_kerberos_keys: generation of a des-cbc-md5 key failed: Bad encryption type"

BZ#1763137 CVE-2019-10218 samba: smb client vulnerable to filenames containing path separators

BZ#1764126 CVE-2019-14833 samba: AD DC check password script does not receive full password when non-ASCII characters are used

BZ#1766558 CVE-2019-10218 samba: smb client vulnerable to filenames containing path separators [fedora-all]

BZ#1766559 CVE-2019-14833 samba: AD DC check password script does not receive full password when non-ASCII characters are used [fedora-all]

This update has been pushed to testing.

6 years ago

anoopcs edited this update.

6 years ago

This update has been obsoleted by samba-4.11.2-1.fc31.

6 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Thresholds

Minimum Karma

Minimum Testing

14 days

Dates

submitted

6 years ago

in testing

6 years ago

modified

6 years ago

Builds

samba-4.11.2-0.fc31

BZ#1757071 Deploy new samba DC cause "setup_kerberos_keys: generation of a des-cbc-md5 key failed: Bad encryption type"

BZ#1763137 CVE-2019-10218 samba: smb client vulnerable to filenames containing path separators

BZ#1763228 samba-4.11.2 is available

BZ#1764126 CVE-2019-14833 samba: AD DC check password script does not receive full password when non-ASCII characters are used

BZ#1766558 CVE-2019-10218 samba: smb client vulnerable to filenames containing path separators [fedora-all]

BZ#1766559 CVE-2019-14833 samba: AD DC check password script does not receive full password when non-ASCII characters are used [fedora-all]

samba-4.11.2-0.fc31

Automated Test Results

ignored

Test Cases


0	0	Test Case desktop network smb