Lucene search

K
suseSuseSUSE-SU-2012:0500-1
HistoryApr 14, 2012 - 10:08 a.m.

Security update for Samba (critical)

2012-04-1410:08:18
lists.opensuse.org
29

0.565 Medium

EPSS

Percentile

97.3%

A remote code execution flaw in Samba has been fixed:

  • CVE-2012-1182: PIDL based autogenerated code uses
    client supplied size values which allows attackers to write
    beyond the allocated array size

Also the following bugs have been fixed:

  • Samba printer name marshalling problems (bnc#722663)
  • mount.cifs: properly update mtab during remount
    (bnc#747906)
  • s3: compile IDL files in autogen, some configure
    tests need this.
  • Fix incorrect types in the full audit VFS module. Add
    null terminators to audit log enums (bnc#742885)
  • Do not map POSIX execute permission to Windows
    FILE_READ_ATTRIBUTES; (bso#8631); (bnc#732572).