Login
Newsletter
Werbung

Sicherheit: Pufferüberlauf in cifs-utils
Aktuelle Meldungen Distributionen
Name: Pufferüberlauf in cifs-utils
ID: FEDORA-2014-6046
Distribution: Fedora
Plattformen: Fedora 19
Datum: Di, 10. Juni 2014, 07:37
Referenzen: Keine Angabe
Applikationen: cifs-utils

Originalnachricht

Name        : cifs-utils
Product : Fedora 19
Version : 6.3
Release : 2.fc19
URL : http://linux-cifs.samba.org/cifs-utils/
Summary : Utilities for mounting and managing CIFS mounts
Description :
The SMB/CIFS protocol is a standard file sharing protocol widely deployed
on Microsoft Windows machines. This package contains tools for mounting
shares on Linux using the SMB/CIFS protocol. The tools in this package
work in conjunction with support in the kernel to allow one to mount a
SMB/CIFS share onto a client and use it as if it were a standard Linux
file system.

-------------------------------------------------------------------------------
-
Update Information:

Update to the latest available sources upstream. The included bug fixes fix a
stack overflow issue in pam_cifscreds and also add better error handling to functions used by pam_cifscreds.
-------------------------------------------------------------------------------
-
ChangeLog:

* Tue May 6 2014 Sachin Prabhu <sprabhu@redhat.com> 6.3-2
- autoconf: allow PAM security install directory to be configurable
- cifs: use krb5_kt_default() to determine default keytab location
- cifskey: better use snprintf()
- cifscreds: better error handling when key_search fails
- cifscreds: better error handling for key_add
* Thu Jan 9 2014 Jeff Layton <jlayton@redhat.com> 6.3-1
- update to 6.3 release
* Fri Dec 13 2013 Jeff Layton <jlayton@redhat.com> 6.2-5
- fix linking of wbclient
- add pam_cifscreds module and manpage
* Mon Oct 14 2013 Jeff Layton <jlayton@redhat.com> 6.2-4
- fix use-after-free in asn1_write
* Fri Oct 11 2013 Jeff Layton <jlayton@redhat.com> 6.2-3
- fixes for bugs reported by coverity:
- update bad bit shift patch with one that patches getcifsacl.c too
- remove some dead code from getcifsacl.c, asn1.c, and data_blob.c
- fix bad handling of allocated memory in del_mtab in mount.cifs.c
* Wed Oct 9 2013 Jeff Layton <jlayton@redhat.com> 6.2-2
- fix bad bit shift in setcifsacl.c
* Fri Oct 4 2013 Jeff Layton <jlayton@redhat.com> 6.2-1
- update to 6.2 release
* Sat Aug 3 2013 Fedora Release Engineering
<rel-eng@lists.fedoraproject.org> - 6.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Mon Jul 15 2013 Jeff Layton <jlayton@redhat.com> 6.1-3
- allow setcifsacl to work if plugin can't be loaded (bz#984087)
* Mon Jul 15 2013 Jeff Layton <jlayton@redhat.com> 6.1-2
- Convert idmapping plugin symlink to use alternatives system (bz#984088)
* Tue Jul 2 2013 Jeff Layton <jlayton@redhat.com> 6.1-1
- update to 6.1 release
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1086226 - cifs-utils: stack-based buffer overflow flaw in
pam_cifscreds [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1086226
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update cifs-utils' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung