Fedora alert FEDORA-2014-6046 (cifs-utils)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 19 Update: cifs-utils-6.3-2.fc19 | |
| Date: | Tue, 10 Jun 2014 03:14:33 +0000 | |
| Message-ID: | <20140610031433.C57A6225E0@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2014-6046 2014-05-06 20:42:43 -------------------------------------------------------------------------------- Name : cifs-utils Product : Fedora 19 Version : 6.3 Release : 2.fc19 URL : http://linux-cifs.samba.org/cifs-utils/ Summary : Utilities for mounting and managing CIFS mounts Description : The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. This package contains tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system. -------------------------------------------------------------------------------- Update Information: Update to the latest available sources upstream. The included bug fixes fix a stack overflow issue in pam_cifscreds and also add better error handling to functions used by pam_cifscreds. -------------------------------------------------------------------------------- ChangeLog: * Tue May 6 2014 Sachin Prabhu <sprabhu@redhat.com> 6.3-2 - autoconf: allow PAM security install directory to be configurable - cifs: use krb5_kt_default() to determine default keytab location - cifskey: better use snprintf() - cifscreds: better error handling when key_search fails - cifscreds: better error handling for key_add * Thu Jan 9 2014 Jeff Layton <jlayton@redhat.com> 6.3-1 - update to 6.3 release * Fri Dec 13 2013 Jeff Layton <jlayton@redhat.com> 6.2-5 - fix linking of wbclient - add pam_cifscreds module and manpage * Mon Oct 14 2013 Jeff Layton <jlayton@redhat.com> 6.2-4 - fix use-after-free in asn1_write * Fri Oct 11 2013 Jeff Layton <jlayton@redhat.com> 6.2-3 - fixes for bugs reported by coverity: - update bad bit shift patch with one that patches getcifsacl.c too - remove some dead code from getcifsacl.c, asn1.c, and data_blob.c - fix bad handling of allocated memory in del_mtab in mount.cifs.c * Wed Oct 9 2013 Jeff Layton <jlayton@redhat.com> 6.2-2 - fix bad bit shift in setcifsacl.c * Fri Oct 4 2013 Jeff Layton <jlayton@redhat.com> 6.2-1 - update to 6.2 release * Sat Aug 3 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 6.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Mon Jul 15 2013 Jeff Layton <jlayton@redhat.com> 6.1-3 - allow setcifsacl to work if plugin can't be loaded (bz#984087) * Mon Jul 15 2013 Jeff Layton <jlayton@redhat.com> 6.1-2 - Convert idmapping plugin symlink to use alternatives system (bz#984088) * Tue Jul 2 2013 Jeff Layton <jlayton@redhat.com> 6.1-1 - update to 6.1 release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1086226 - cifs-utils: stack-based buffer overflow flaw in pam_cifscreds [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1086226 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update cifs-utils' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...