MGASA-2017-0326

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2017-0326.html
Import Source
https://advisories.mageia.org/MGASA-2017-0326.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2017-0326
Related
Published
2017-09-03T14:31:33Z
Modified
2017-09-03T14:12:31Z
Summary
Updated samba packages fix security vulnerability
Details

Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered that Samba clients incorrectly trusted unauthenticated portions of Kerberos tickets. A remote attacker could use this to impersonate trusted network servers or perform other attacks (CVE-2017-11103).

The samba package has been updated to version 4.6.7, fixing this issue and several other bugs.

References
Credits

Affected packages

Mageia:6 / samba

Package

Name
samba
Purl
pkg:rpm/mageia/samba?distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.6.7-1.mga6

Ecosystem specific 

{
    "section": "core"
}