Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2013-0506

Опубликовано: 27 фев. 2013
Источник: oracle-oval
Платформа: Oracle Linux 6

Описание

ELSA-2013-0506: samba4 security, bug fix and enhancement update (MODERATE)

[4.0.0-55.rc4]

  • Fix dependencies of samba4-test package.
  • related: #896142

[4.0.0-54.rc4]

  • Fix summary and description of dc subpackages.
  • resolves: #896142
  • Remove conflicting libsmbclient.7 manpage.
  • resolves: #896240

[4.0.0-53.rc4]

  • Fix provides filter rules to remove conflicting libraries from samba4-libs.
  • resolves: #895718

[4.0.0-52.rc4]

  • Fix typo in winbind-krb-locator post uninstall script.
  • related: #864889

[4.0.0-51.rc4]

  • Make sure we use the same directory as samba package for the winbind pipe.
  • resolves: #886157

[4.0.0-50.rc4]

  • Fix typo in winbind-krb-locator post uninstall script.
  • related: #864889

[4.0.0-49.rc4]

  • Fix Netlogon AES encryption.
  • resolves: #885089

[4.0.0-48.rc4]

  • Fix IPA trust AD lookup of users.
  • resolves: #878564

[4.0.0-47.rc4]

  • Add require for krb5-libs >= 1.10 to samba4-libs.
  • resolves: #877533

[4.0.0-46.rc4]

  • Rename /etc/sysconfig/samba4 to name to mach init scripts.
  • resolves: #877085

[4.0.0-45.rc4]

  • Don't require samba4-common and samba4-test in samba4-devel package.
  • related: #871748

[4.0.0-44.rc4]

  • Make libnetapi and internal library to fix dependencies.
  • resolves: #873491

[4.0.0-43.rc4]

  • Move libnetapi and internal printing migration lib to libs package.
  • related: #766333

[4.0.0-42.rc4]

  • Fix perl, pam and logrotate dependencies.
  • related: #766333

[4.0.0-41.rc4]

  • Fix library dependencies found by rpmdiff.
  • Update winbind offline logon patch.
  • related: #766333

[4.0.0-40.rc4]

  • Move libgpo to samba-common
  • resolves: #871748

[4.0.0-39.rc4]

  • Rebase to version 4.0.0rc4.
  • related: #766333

[4.0.0-38.rc3]

  • Add missing export KRB5CCNAME in init scripts.
  • resolves: #868419

[4.0.0-37.rc3]

  • Move /var/log/samba to samba-common package for winbind which requires it.
  • resolves: #868248

[4.0.0-36.rc3]

  • The standard auth modules need to be built into smbd to function.
  • resolves: #867854

[4.0.0-35.rc3]

  • Move pam_winbind.conf to the package of the module.
  • resolves: #867317

[4.0.0-34.rc3]

  • Built auth_builtin as static module.
  • related: #766333

[4.0.0-33.rc3]

  • Add back the AES patches which didn't make it in rc3.
  • related: #766333

[4.0.0-32.rc3]

  • Rebase to version 4.0.0rc3.
  • related: #766333

[4.0.0-31.rc2]

  • Use alternatives to configure winbind_krb5_locator.so
  • resolves: #864889

[4.0.0-30.rc2]

  • Fix multilib package installation.
  • resolves: #862047
  • Filter out libsmbclient and libwbclient provides.
  • resolves: #861892
  • Rebase to version 4.0.0rc2.
  • related: #766333

[4.0.0-29.rc1]

  • Fix Requires and Conflicts.
  • related: #766333

[4.0.0-28.rc1]

  • Move pam_winbind and wbinfo manpages to the right subpackage.
  • related: #766333

[4.0.0-27.rc1]

  • Fix permission for init scripts.
  • Define a common KRB5CCNAME for smbd and winbind.
  • Set piddir back to /var/run in RHEL6.
  • related: #766333

[4.0.0-26.rc1]

  • Add '-fno-strict-aliasing' to CFLAGS again.
  • related: #766333

[4.0.0-25.rc1]

  • Build with syste libldb package which has been just added.
  • related: #766333

[4.0.0-24.rc1]

  • Rebase to version 4.0.0rc1.
  • resolves: #766333

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

samba4

4.0.0-55.el6.rc4

samba4-client

4.0.0-55.el6.rc4

samba4-common

4.0.0-55.el6.rc4

samba4-dc

4.0.0-55.el6.rc4

samba4-dc-libs

4.0.0-55.el6.rc4

samba4-devel

4.0.0-55.el6.rc4

samba4-libs

4.0.0-55.el6.rc4

samba4-pidl

4.0.0-55.el6.rc4

samba4-python

4.0.0-55.el6.rc4

samba4-swat

4.0.0-55.el6.rc4

samba4-test

4.0.0-55.el6.rc4

samba4-winbind

4.0.0-55.el6.rc4

samba4-winbind-clients

4.0.0-55.el6.rc4

samba4-winbind-krb5-locator

4.0.0-55.el6.rc4

Oracle Linux i686

samba4

4.0.0-55.el6.rc4

samba4-client

4.0.0-55.el6.rc4

samba4-common

4.0.0-55.el6.rc4

samba4-dc

4.0.0-55.el6.rc4

samba4-dc-libs

4.0.0-55.el6.rc4

samba4-devel

4.0.0-55.el6.rc4

samba4-libs

4.0.0-55.el6.rc4

samba4-pidl

4.0.0-55.el6.rc4

samba4-python

4.0.0-55.el6.rc4

samba4-swat

4.0.0-55.el6.rc4

samba4-test

4.0.0-55.el6.rc4

samba4-winbind

4.0.0-55.el6.rc4

samba4-winbind-clients

4.0.0-55.el6.rc4

samba4-winbind-krb5-locator

4.0.0-55.el6.rc4

Связанные CVE

Связанные уязвимости

ubuntu
больше 13 лет назад

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.

redhat
больше 13 лет назад

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.

nvd
больше 13 лет назад

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.

debian
больше 13 лет назад

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14 ...

github
больше 3 лет назад

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.