Alert GCSA-18023 - Vulnerabilita' nel server Samba

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

   Alert ID: Alert GCSA-18023
   Data: 14 marzo 2018
   Titolo: Vulnerabilita' nel server Samba

******************************************************************

:: Descrizione del problema

   Sono stati rilasciati degli aggiornamenti per due vulnerabilita' critiche
   presenti nel software Samba.


:: Software interessato

   Samba versioni precedenti alla 4.7.6
   Samba versioni precedenti alla 4.6.14
   Samba versioni precedenti alla 4.5.16


:: Impatto

   Denial of service 
   Cambio arbitrario delle password, anche per lo user admin


:: Soluzioni

   Applicare le seguenti patch

   https://www.samba.org/samba/history/security.html

   oppure installare samba 4.8.0


:: Riferimenti

   Samba Announcement
   https://www.samba.org/samba/security/CVE-2018-1050.html
   https://www.samba.org/samba/security/CVE-2018-1057.html

   Threat Post
   https://threatpost.com/samba-patches-two-critical-vulnerabilities-in-server-software/130383/

   Debian Security Advisory
   https://www.debian.org/security/2018/dsa-4135

   Ubuntu security notices
   https://usn.ubuntu.com/3595-1/

   Slackware Security Advisories 
   http://www.slackware.com/security/viewer.php?l=slackware-security&y=2018&m=slackware-security.449448

   RedHat
   https://bugzilla.redhat.com/show_bug.cgi?id=1538771

   SecurityFocus
   https://www.securityfocus.com/bid/103387


GARR CERT Security Alert -  subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert

-----BEGIN PGP SIGNATURE-----

iD8DBQFaqRepwZxMk2USYEIRAl3MAKCSi1MirMgXhKYmu6fxR1JDbkPYMACgqHJt
nJhWxBUwtP6F0QIUIssl8d0=
=ZVoH
-----END PGP SIGNATURE-----