-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-23177 2013-12-11 16:30:05 --------------------------------------------------------------------------------
Name : samba Product : Fedora 20 Version : 4.1.3 Release : 2.fc20 URL : http://www.samba.org/ Summary : Server and Client software to interoperate with Windows machines Description : Samba is the standard Windows interoperability suite of programs for Linux and Unix. -------------------------------------------------------------------------------- Update Information: Fix NULL pointer derreference in winbind debug message. Update to version 4.1.3 which fixes two security bugs. -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 10 2013 - Guenther Deschner <[email protected]> - 4.1.3-2 - resolves: #1019469 - Fix winbind debug message NULL pointer derreference. * Mon Dec 9 2013 - Andreas Schneider <[email protected]> - 4.1.3-1 - Update to Samba 4.1.3. - resolves: #1039454 - CVE-2013-4408. - resolves: #1039500 - CVE-2012-6150. * Mon Nov 25 2013 - Andreas Schneider <[email protected]> - 4.1.2-1 - Update to Samba 4.1.2. * Mon Nov 18 2013 - Guenther Deschner <[email protected]> - 4.1.1-3 - resolves: #948509 - Fix manpage correctness. * Fri Nov 15 2013 - Andreas Schneider <[email protected]> - 4.1.1-2 - related: #884169 - Fix strict aliasing warnings. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1019469 - Losing network connection causes segfault in winbindd https://bugzilla.redhat.com/show_bug.cgi?id=1019469 [ 2 ] Bug #1039454 - CVE-2013-4408 samba: Heap-based buffer overflow due to incorrect DCE-RPC fragment length field check [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1039454 [ 3 ] Bug #1039500 - CVE-2012-6150 samba: pam_winbind fails open when non-existent group specified to require_membership_of [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1039500 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update samba' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
