CESA-2018:3056 -- centos 7 ctdbID: oval:org.secpod.oval:def:205139 | Date: (C)2019-01-18 (M)2023-12-20 |
Class: PATCH | Family: unix |
Samba is an open-source implementation of the Server Message Block protocol and the related Common Internet File System protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version: samba . Security Fix: * samba: Weak authentication protocol regression * samba: Insufficient input validation in libsmbclient * samba: NULL pointer dereference in printer server process For more details about the security issue, including the impact, a CVSS score, and other related information, refer to the CVE page listed in the References section. Red Hat would like to thank the Samba project for reporting CVE-2018-1050. The CVE-2018-1139 issue was discovered by Vivek Das . Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.