==========================================================================
Ubuntu Security Notice USN-3976-3
May 27, 2019

samba regression
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS

Summary:

USN-3976-1 introduced a regression in Samba.

Software Description:
– samba: SMB/CIFS file, print, and login server for Unix

Details:

USN-3976-1 fixed a vulnerability in Samba. The update introduced a
regression causing Samba to occasionally crash. This update fixes the
problem.

We apologize for the inconvenience.

Original advisory details:

Isaac Boukris and Andrew Bartlett discovered that Samba incorrectly checked
S4U2Self packets. In certain environments, a remote attacker could possibly
use this issue to escalate privileges.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.11

Ubuntu 16.04 LTS:
samba 2:4.3.11+dfsg-0ubuntu0.16.04.21

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/usn/usn-3976-3
https://usn.ubuntu.com/usn/usn-3976-1
https://launchpad.net/bugs/1827924

Package Information:
https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.11
https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.21

—–BEGIN PGP SIGNATURE—–
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=eScX
—–END PGP SIGNATURE—–
—

==========================================================================
Ubuntu Security Notice USN-3976-4
May 27, 2019

samba vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.04 ESM

Summary:

USN-3976-1 introduced a regression in Samba.

Software Description:
- samba: SMB/CIFS file, print, and login server for Unix

Details:

USN-3976-1 fixed a vulnerability in Samba. The update introduced a
regression causing Samba to occasionally crash. This update fixes the
problem.

Original advisory details:

 Isaac Boukris and Andrew Bartlett discovered that Samba incorrectly
 checked S4U2Self packets. In certain environments, a remote attacker
 could possibly use this issue to escalate privileges.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  samba                           2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2

In general, a standard system update will make all the necessary
changes.

References:
  https://usn.ubuntu.com/usn/usn-3976-4
  https://usn.ubuntu.com/usn/usn-3976-1
  https://launchpad.net/bugs/1827924-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=9ai2
-----END PGP SIGNATURE-----
-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce