DSA-3514-1 samba - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3514-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2016-0106 Updated samba packages fix security vulnerability

Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink paths. A remote attacker could use this issue to overwrite the ownership of ACLs using symlinks CVE-2015-7560...

Updated samba packages fix security vulnerability

Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink paths. A remote attacker could use this issue to overwrite the ownership of ACLs using symlinks CVE-2015-7560...

Ubuntu: Security Advisory (USN-2922-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security fix for the ALT Linux 7 package samba version 4.3.6-alt1

March 9, 2016 Andrey Cherepanov 4.3.6-alt1 - New version https://www.samba.org/samba/history/samba-4.3.6.html - Security fixes: - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path - CVE-2016-0771 Out-of-bounds read in internal DNS server - Do not use specified GID for wbpriv group ALT...

Slackware 14.1 / current : samba (SSA:2016-068-02)

New samba packages are available for Slackware 14.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-068-02. The text itself is copyright C Slackwar...

Ubuntu 14.04 LTS : Samba vulnerabilities (USN-2922-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2922-1 advisory. Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink paths. A remote attacker could use this issue to overwrite the ownership of ACLs...

Security fix for the ALT Linux 7 package samba-DC version 4.3.6-alt1

March 9, 2016 Andrey Cherepanov 4.3.6-alt1 - New version https://www.samba.org/samba/history/samba-4.3.6.html - Security fixes: - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path - CVE-2016-0771 Out-of-bounds read in internal DNS server - Do not use specified GID for wbpriv group...

Security fix for the ALT Linux 8 package samba-DC version 4.3.6-alt1

March 9, 2016 Andrey Cherepanov 4.3.6-alt1 - New version https://www.samba.org/samba/history/samba-4.3.6.html - Security fixes: - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path - CVE-2016-0771 Out-of-bounds read in internal DNS server - Do not use specified GID for wbpriv group...

Security fix for the ALT Linux 10 package samba version 4.3.6-alt1

March 9, 2016 Andrey Cherepanov 4.3.6-alt1 - New version https://www.samba.org/samba/history/samba-4.3.6.html - Security fixes: - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path - CVE-2016-0771 Out-of-bounds read in internal DNS server - Do not use specified GID for wbpriv group...

Security fix for the ALT Linux 8 package samba version 4.3.6-alt1

March 9, 2016 Andrey Cherepanov 4.3.6-alt1 - New version https://www.samba.org/samba/history/samba-4.3.6.html - Security fixes: - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path - CVE-2016-0771 Out-of-bounds read in internal DNS server - Do not use specified GID for wbpriv group ALT...

[slackware-security] samba

New samba packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/samba-4.1.23-i486-1slack14.1.txz: Upgraded. This update fixes bugs, and two security issues: Incorrect ACL get/set allowed on symlink...

USN-2922-1: Samba vulnerabilities

Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink paths. A remote attacker could use this issue to overwrite the ownership of ACLs using symlinks. CVE-2015-7560 Garming Sam and Douglas Bagnall discovered that the Samba internal DNS server incorrectly handled certain DNS TXT...

Debian Security Advisory DSA 3426-2 (ctdb - security update)

The update for linux issued as DSA-3426-1 and DSA-3434-1 to address CVE-2015-8543 uncovered a bug in ctdb, a clustered database to store temporary data, leading to broken clusters. Updated packages are now available to address this problem. OpenVAS Vulnerability Test $Id: deb3426.nasl 6608...

CVE-2016-0771

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory by...

VMware ESX Multiple Vulnerabilities (VMSA-2010-0019) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - bzip2 - Network Security Services NSS Library - OpenSSL - Samba %NASLMINLEVE...

UBUNTU-CVE-2016-0771

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory by...

VMware ESX Third-Party Libraries and Components Multiple Vulnerabilities (VMSA-2010-0006) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities in several third-party components and libraries : - A denial of service vulnerability exists in the ACPI Event Daemon acpid that allows a remote attacker to cause a consumption o...

CVE-2015-7560

The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL...