Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe-

cution as the "root" user; PIDL based autogenerated code allows overwriting
beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797).

OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=231
This commit is contained in:
Lars Müller
2012-04-10 16:26:27 +00:00
committed by Git OBS Bridge
parent 8b9a692f5f
commit 1267c2009c
6 changed files with 26 additions and 140 deletions

View File

@@ -1,11 +1,16 @@
-------------------------------------------------------------------
Tue Apr 10 16:13:34 UTC 2012 - lmuelle@suse.com
- Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe-
cution as the "root" user; PIDL based autogenerated code allows overwriting
beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797).
-------------------------------------------------------------------
Sun Mar 25 21:14:33 UTC 2012 - lmuelle@suse.de
- s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys;
(bso#8599).
- Correctly handle DENY ACEs when privileges apply; (bso#8797).
- dcerpc_lsa_lookup_sids_noalloc() crashes when groups has more than 1000
groups; (bso#8807).
-------------------------------------------------------------------
Fri Mar 16 20:26:20 UTC 2012 - lmuelle@suse.de