Mageia alert MGASA-2012-0162 (samba)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0162: samba-3.5.8-1.4.mga1,
 cifs-utils-4.8.1-1.3.mga1 (1/core) 
Date:
    	     
 
Fri, 13 Jul 2012 22:52:01 +0200
Message-ID:
    	     
 
<20120713205201.GA22879@valstar.mageia.org>

MGASA-2012-0162
Date: 	July 13th, 2012
Affected releases: 	1


Description:
Updated cifs-utils and samba packages fix security vulnerability:

A file existence dislosure flaw was found in the way mount.cifs tool
of the Samba SMB/CIFS tools suite performed mount of a Linux CIFS
(Common Internet File System) filesystem. A local user, able to
mount a remote CIFS share / target to a local directory could use
this flaw to confirm (non) existence of a file system object (file,
directory or process descriptor) via error messages generated during
the mount.cifs tool run (CVE-2012-1586).


Updated Packages:
cifs-utils-4.8.1-1.3.mga1
samba-client-3.5.8-1.4.mga1
samba-common-3.5.8-1.4.mga1
samba-doc-3.5.8-1.4.mga1
samba-domainjoin-gui-3.5.8-1.4.mga1
samba-server-3.5.8-1.4.mga1
samba-swat-3.5.8-1.4.mga1
samba-winbind-3.5.8-1.4.mga1
mount-cifs-3.5.8-1.4.mga1
nss_wins-3.5.8-1.4.mga1
lib(64)netapi0-3.5.8-1.4.mga1
lib(64)netapi-devel-3.5.8-1.4.mga1
lib(64)smbclient0-3.5.8-1.4.mga1
lib(64)smbclient0-devel-3.5.8-1.4.mga1
lib(64)smbclient0-static-devel-3.5.8-1.4.mga1
lib(64)smbsharemodes0-3.5.8-1.4.mga1
lib(64)smbsharemodes-devel-3.5.8-1.4.mga1
lib(64)wbclient0-3.5.8-1.4.mga1
lib(64)wbclient-devel-3.5.8-1.4.mga1


References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1586
https://bugzilla.samba.org/show_bug.cgi?id=8821
http://www.mandriva.com/en/support/security/advisories/?d...
http://www.mandriva.com/en/support/security/advisories/?d...
https://bugs.mageia.org/show_bug.cgi?id=5714
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...