Lucene search

K
suseSuseSUSE-SU-2016:1105-1
HistoryApr 19, 2016 - 9:07 p.m.

Security update for samba (important)

2016-04-1921:07:47
lists.opensuse.org
28

0.015 Low

EPSS

Percentile

85.6%

Samba was updated to fix three security issues.

These security issues were fixed:

   * CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP
     authentication (bso#11688, bsc#973031).
   * CVE-2016-2111: Domain controller netlogon member computer could have
     been spoofed (bso#11749, bsc#973032).
   * CVE-2015-5252: Insufficient symlink verification (allowed file access
     outside the share) (bso#11395, bnc#958582).

This non-security issue was fixed:

   * Allow "delete readonly = yes" to correctly override deletion of a
     file (bsc#913087, bso#5073)

Security Issues:

   * CVE-2016-2110
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2110">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2110</a>&gt;
   * CVE-2016-2111
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2111">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2111</a>&gt;
   * CVE-2015-5252
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5252">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5252</a>&gt;

Contraindications: