Lucene search

K
suseSuseSUSE-SU-2014:0024-1
HistoryJan 07, 2014 - 12:04 a.m.

Security update for Samba (important)

2014-01-0700:04:36
lists.opensuse.org
22

0.007 Low

EPSS

Percentile

78.3%

This update fixes the following security issues with Samba:

  • bnc#844720: DCERPC frag_len not checked
    (CVE-2013-4408)
  • bnc#853347: winbind pam security problem
    (CVE-2012-6150)
  • bnc#848101: No access check verification on stream
    files (CVE-2013-4475)

And fixes the following non-security issues:

  • bnc#853021: libsmbclient0 package description
    contains comments
  • bnc#817880: rpcclient adddriver and setdrive do not
    set all needed registry entries
  • bnc#838472: Client trying to delete print job fails:
    Samba returns: WERR_INVALID_PRINTER_NAME
  • bnc#854520 and bnc#849226: various upstream fixes