[SECURITY] [DSA 3816-2] samba regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3816-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 02, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3816-2] samba regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3816-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 02, 2017 https://www.debian.org/security/faq -...

DSA-3816-2 samba - regression update

Bulletin has no description...

[slackware-security] samba

New samba packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a regression with the previous security patch. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/samba-4.4.13-i586-1slack14.2.txz: Upgraded. This is a bug fix release to address a regressio...

Ubuntu: Security Advisory (USN-3242-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : Samba regression (USN-3242-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3242-2 advisory. USN-3242-1 fixed a vulnerability in Samba. The upstream fix introduced a regression when Samba is configured to disable following symbolic links. This...

USN-3242-2: Samba regression

USN-3242-1 fixed a vulnerability in Samba. The upstream fix introduced a regression when Samba is configured to disable following symbolic links. This update fixes the problem. Original advisory details: Jann Horn discovered that Samba incorrectly handled symlinks. An authenticated remote attacke...

USN-3242-2 samba regression

USN-3242-1 fixed a vulnerability in Samba. The upstream fix introduced a regression when Samba is configured to disable following symbolic links. This update fixes the problem. Original advisory details: Jann Horn discovered that Samba incorrectly handled symlinks. An authenticated remote attacke...

Oracle Linux 6 : samba (ELSA-2017-0662)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0662 advisory. - resolves: 1405356 - CVE-2016-2125 CVE-2016-2126 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

SUSE SLES11 Security Update : samba (SUSE-SU-2017:0841-1)

This update for samba fixes the following issues: Security issue fixed : - CVE-2017-2619: symlink race permits opening files outside share directory bsc1027147. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:0859-1)

"This update for samba fixes the following issues: Security issues fixed : - CVE-2017-2619: Symlink race permits opening files outside share directory bsc1027147. Bugfixes : - Don't package man pages for VFS modules that aren't built bsc993707. - syncreq: make asyncconnectsend 'reentrant'; bso121...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:0858-1)

"This update for samba fixes the following issues: Security issues fixed : - CVE-2017-2619: Symlink race permits opening files outside share directory bsc1027147. Bugfixes : - Force usage of ncurses6-config thru NCURSESCONFIG env var bsc1023847. - Add missing ldb module directory bsc1012092. -...

SUSE SLES12 Security Update : samba (SUSE-SU-2017:0862-1)

"This update for samba fixes the following issues: Security issues fixed : - CVE-2017-2619: Symlink race permits opening files outside share directory bsc1027147. Bugfixes : - Don't package man pages for VFS modules that aren't built bsc993707. - syncreq: make asyncconnectsend 'reentrant'; bso121...

SUSE-SU-2017:0862-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2017-2619: Symlink race permits opening files outside share directory bsc1027147. Bugfixes: - Don't package man pages for VFS modules that aren't built bsc993707. - syncreq: make asyncconnectsend 'reentrant'; bso12105;...

SUSE-SU-2017:0859-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2017-2619: Symlink race permits opening files outside share directory bsc1027147. Bugfixes: - Don't package man pages for VFS modules that aren't built bsc993707. - syncreq: make asyncconnectsend 'reentrant'; bso12105;...

SUSE-SU-2017:0858-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2017-2619: Symlink race permits opening files outside share directory bsc1027147. Bugfixes: - Force usage of ncurses6-config thru NCURSESCONFIG env var bsc1023847. - Add missing ldb module directory bsc1012092. - Don't...

SUSE-SU-2017:0841-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2017-2619: symlink race permits opening files outside share directory bsc1027147...

Samba: symlink race permits opening files outside share directory (CVE-2017-2619)

The Samba server is supposed to only grant access to the configured share directories unless the "wide links" are enabled, in which case the server is allowed to follow symlinks. The default since CVE-2010-0926 is that wide links are disabled. smbd ensures that it isn't following symlinks by...

Samba 4.5.2 - Symlink Race Permits Opening Files Outside Share Directory Vulnerability

Exploit for multiple platform in category remote exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1039 The Samba server is supposed to only grant access to configured share directories unless "wide links" are enabled, in which case the server is allowed to follow symlink...

samba security and bug fix update

3.6.23-41.0.1 - Remove use-after-free talloctos inlined function problem John Haxby orabug 18253258 3.6.23-41 - resolves: 1413672 - Auth regression after secret changed 3.6.23-40 - resolves: 1405356 - CVE-2016-2125 CVE-2016-2126 3.6.23-39 - resolves: 1297805 - Fix issues with printer unpublishing...