==========================================================================
Ubuntu Security Notice USN-4217-2
December 11, 2019

samba vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 14.04 ESM

Summary:

Several security issues were fixed in Samba.

Software Description:
– samba: SMB/CIFS file, print, and login server for Unix

Details:

USN-4217-1 fixed several vulnerabilities in Samba. This update provides
the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

Andreas Oster discovered that the Samba DNS management server incorrectly
handled certain records. An authenticated attacker could possibly use this
issue to crash Samba, resulting in a denial of service. (CVE-2019-14861)

Isaac Boukris discovered that Samba did not enforce the Kerberos
DelegationNotAllowed feature restriction, contrary to expectations.
(CVE-2019-14870)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
libsmbclient 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4
samba 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4217-2
https://usn.ubuntu.com/4217-1
CVE-2019-14861, CVE-2019-14870
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1

iQIcBAEBAgAGBQJd8SCQAAoJEEW851uECx9pOusP/A32UhJAultFJyWQmkqWDetH
DVrGw0QeKqa5IalkCPu8Q+xR4zZuverT8o34GXXVR/4IBcvFBJVyuQEotqdiQndU
8tAr61lMLK39dlFDxny0GQfMfnQHf1gMbnSNAnyFI8eHtHj23EjxfZjOw6wrcBH4
uqQbstBqu55ViIRfGLsMohytGFQtLgewSkyvRsfIapFUtyEtAq07WMkGZTx8z+o4
LwJzPgbvzaZPedirNwHd8Sl9IlUiMW/GGbMkGEvLRebnTLyZwWISyg9QLOnaEQwV
35lJA6NBRlM0JZ3h02/gU9/4u4IiYHuSc718f1ZJyuFsy3qe+JVU+jFJDlJSSAom
lTuLw7/W1j/9ptfxlBfL6O7cZ1TL20Qj9iQ9aOXyGrVV9T85bOEavIvwPlghpXWA
tT8g9VKNF2Po1KZzwcLVx38mgn3AJkNaTR+6ECXTQHMBg1MeOFaATGwHgyOVCtxI
M2pN1dJCz/Azh+1qMPUEPAWWFzIDm+IpMrm30QTMuFVtCi/b6soMLYTJywI+xe2W
3oUjkfz+E+8BDy3Nsm0+a5tAQRWPB9jtPEA2zJvM4OTGFr3jsfEFte/3n8x5ixjg
bNHsTZjyYw7r1GHD9fuJzOETsN+sFYGM/kb3k7Fc/2GmrNxLIfC6iBNZDL6IfqRi
mrrM4IZNNt8e59PR5hGe
=dlLN
—–END PGP SIGNATURE—–
—