Debian-LTS alert DLA-156-1 (samba)

From:
    	     
 
Raphael Hertzog <hertzog@debian.org> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 156-1] samba security update 
Date:
    	     
 
Mon, 23 Feb 2015 18:00:36 +0100
Message-ID:
    	     
 
<20150223170036.GA8149@home.ouaza.com>
Package        : samba
Version        : 2:3.5.6~dfsg-3squeeze12
CVE ID         : CVE-2015-0240
Debian Bug     : 779033

Richard van Eeden of Microsoft Vulnerability Research discovered that
Samba, a SMB/CIFS file, print, and login server for Unix, contains a
flaw in the netlogon server code which allows remote code execution with
root privileges from an unauthenticated connection.

For the oldstable distribution (squeeze), this problem has been fixed in
version 2:3.5.6~dfsg-3squeeze12.

For the stable distribution (wheezy), this problem has been fixed in
version 2:3.6.6-6+deb7u5.

We recommend that you upgrade your samba packages.
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/