Lucene search

K
suseSuseSUSE-SU-2015:0386-1
HistoryFeb 27, 2015 - 11:04 a.m.

Security update for Samba (important)

2015-02-2711:04:55
lists.opensuse.org
22

0.974 High

EPSS

Percentile

99.9%

Samba has been updated to fix one security issue:

   * CVE-2015-0240: Don't call talloc_free on an uninitialized pointer
     (bnc#917376).

Additionally, these non-security issues have been fixed:

   * Realign the winbind request structure following
     require_membership_of field expansion (bnc#913001).
   * Reuse connections derived from DFS referrals (bso#10123,
     fate#316512).
   * Set domain/workgroup based on authentication callback value
     (bso#11059).
   * Fix spoolss error response marshalling (bso#10984).
   * Fix spoolss EnumJobs and GetJob responses (bso#10905, bnc#898031).
   * Fix handling of bad EnumJobs levels (bso#10898).
   * Fix small memory-leak in the background print process (bnc#899558).
   * Prune idle or hung connections older than "winbind request timeout"
     (bso#3204, bnc#872912).
   * Build: disable mmap on s390 systems (bnc#886193, bnc#882356).
   * Only update the printer share inventory when needed (bnc#883870).
   * Avoid double-free in get_print_db_byname (bso#10699).

Security Issues:

   * CVE-2015-0240
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0240">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0240</a>&gt;