Medium ELSA-2016-0448 1 CVE

Moderate: samba security update (Oracle Linux 7)

Published Mar 15, 2016 · Updated Mar 15, 2016

Ecosystem: Oracle Linux

Summary

[3.6.23-25.0.1]
- Remove use-after-free talloc_tos() inlined function problem (John Haxby) [orabug 18253258]

[3.6.23-25]
- resolves: #1314668 - Fix CVE-2015-7560

Fixed packages 29

Release	Package	Fixed in
Oracle Linux · 7	libsmbclient	0:4.2.3-12.el7_2
Oracle Linux · 7	libsmbclient-devel	0:4.2.3-12.el7_2
Oracle Linux · 7	libwbclient	0:4.2.3-12.el7_2
Oracle Linux · 7	libwbclient-devel	0:4.2.3-12.el7_2
Oracle Linux · 7	samba	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-client	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-client-libs	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-common	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-common-libs	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-common-tools	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-dc	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-dc-libs	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-devel	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-doc	0:3.6.23-25.0.1.el6_7
Oracle Linux · 7	samba-domainjoin-gui	0:3.6.23-25.0.1.el6_7
Oracle Linux · 7	samba-glusterfs	0:3.6.23-25.0.1.el6_7
Oracle Linux · 7	samba-libs	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-pidl	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-python	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-swat	0:3.6.23-25.0.1.el6_7
Oracle Linux · 7	samba-test	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-test-devel	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-test-libs	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-vfs-glusterfs	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-winbind	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-winbind-clients	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-winbind-devel	0:3.6.23-25.0.1.el6_7
Oracle Linux · 7	samba-winbind-krb5-locator	0:4.2.3-12.el7_2
Oracle Linux · 7	samba-winbind-modules	0:4.2.3-12.el7_2

Vulnerabilities 1

Unscored —

CVE-2015-7560 EPSS 13%

The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x b…

samba samba Debian Ubuntu

Mar 13, 2016