==========================================================================
Ubuntu Security Notice USN-3426-2
November 02, 2017

samba vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 12.04 ESM

Summary:

Several security issues were fixed in XXX-APP-XXX.

Software Description:
– samba: SMB/CIFS file, print, and login server for Unix

Details:

USN-3426-1 fixed several vulnerabilities in Samba. This update
provides the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 Stefan Metzmacher discovered that Samba incorrectly enforced SMB
 signing in certain situations. A remote attacker could use this issue
 to perform a man in the middle attack. (CVE-2017-12150)

 Yihan Lian and Zhibin Hu discovered that Samba incorrectly handled
 memory when SMB1 is being used. A remote attacker could possibly use
 this issue to obtain server memory contents. (CVE-2017-12163)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  samba                           2:3.6.25-0ubuntu0.12.04.13

In general, a standard system update will make all the necessary
changes.

References:
  https://www.ubuntu.com/usn/usn-3426-2
  https://www.ubuntu.com/usn/usn-3426-1
  CVE-2017-12150, CVE-2017-12163
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=prpE
—–END PGP SIGNATURE—–
—