[IT-SecNots] [SECURITY] [DSA 4443-1] samba security update

[Salvatore Bonaccorso <carnil AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4443-1                   security AT debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
May 14, 2019                          https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : samba
CVE ID         : CVE-2018-16860

Isaac Boukris and Andrew Bartlett discovered that the S4U2Self Kerberos
extension used in Samba's Active Directory support was susceptible to
man-in-the-middle attacks caused by incomplete checksum validation.

Details can be found in the upstream advisory at
https://www.samba.org/samba/security/CVE-2018-16860.html

For the stable distribution (stretch), this problem has been fixed in
version 2:4.5.16+dfsg-1+deb9u2.

We recommend that you upgrade your samba packages.

For the detailed security status of samba please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/samba

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlzamKFfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
z0Qk3g//SQQTI/J8JjwiCTND4yPp92NkSlEeulnprC/OEjCj3LFa9whITfRjzcoH
wwpdcuhrZ5r861dudaBXd3AWwAQUjcTZnOCPhC7f+DBGcstVQiuQ2RsSFJmnINyH
s3lv4hlKPWtRkqyEwRDS8q170ljiIbjCtITvxn9p/tby1/iOMZxEuSwI9mXGqBxn
doOVv5x55/MH+vz1sxFHR9b/bBBi/IxUHmLxpF6Fn3glMRglAaJ05R7hVZs0gUvN
GBrZgMyRfhybYZ4tQbJ1Ljb0ACdJo9aM8udjPZx6Ngbk7mDrEl7dS2aFjDvZEXrl
+mzkgXR4HEGmKAUDeKL7UBoSUi4So9LPtkRdrPlB4uV5xObYP6dV75Kk3bf+RCZJ
qRNFQbeQI96AVxe5x5qW434H9xZaYg4pJOXEdShqhy83dyKl3sa0AmSWBpPXx5Ob
xRXYbVPUYWQsD2kkX9+YmKST5M20CNph9TKU7McMlnYDheuNSuKZvueqRdzY009x
LyQizXtlGIsHKnEiYEu7LURvRjBe2D2Rav/TmUyx8JbqanFZCiEJ9hlHV9NK/19h
FXP/JbiVzsPOvUns6h6Gsj4so2+H21e0EE0DinuZs81eMlSvDfV52ika3+ST7dcP
OhdMsTA4SeeqIyKcwWegfLHEHA3zp8U9oXbw5jHiH5hGvq0Cqv8=
=qIgj
-----END PGP SIGNATURE-----