Vulnerability Bulletins

DSA-3909 samba - security update

   
Affected software Debian
 
Jeffrey Altman, Viktor Duchovni and Nico Williams identified a mutualauthentication bypass vulnerability in samba, the SMB/CIFS file, print, andlogin server. Also known as Orpheus Lyre, this vulnerability is located inSamba Kerberos Key Distribution Center (KDC-REP) component and could be used byan attacker on the network path to impersonate a server.

More info:

https://www.debian.org/security/2017/dsa-3909