Mageia alert MGASA-2016-0106 (samba)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2016-0106: Updated samba packages fix security vulnerability 
Date:
    	     
 
Fri, 11 Mar 2016 00:38:10 +0100
Message-ID:
    	     
 
<20160310233810.107BA9F699@duvel.mageia.org>
MGASA-2016-0106 - Updated samba packages fix security vulnerability

Publication date: 10 Mar 2016
URL: http://advisories.mageia.org/MGASA-2016-0106.html

Type: security
Affected Mageia releases: 5
CVE: CVE-2015-7560

Description:
Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink
paths. A remote attacker could use this issue to overwrite the ownership
of ACLs using symlinks (CVE-2015-7560).

References:
- https://bugs.mageia.org/show_bug.cgi?id=17911

- https://www.samba.org/samba/security/CVE-2015-7560.html

- http://www.ubuntu.com/usn/usn-2922-1

- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7560


SRPMS:
- 5/core/samba-3.6.25-2.2.mga5