Уведомление безопасности DSA-1291

Критичная (10.0)

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Debian

libpam-smbpass (any) libsmbclient (any) libsmbclient-dev (any) python-samba (any) samba (any) samba-common (any) samba-dbg (any) samba-doc (any) samba-doc-pdf (any) smbclient (any) smbfs (any) swat (any) winbind (any)

Уведомление безопасности об уязвимостях smbfs, samba, samba-doc, winbind, smbclient, samba-doc-pdf, libsmbclient, swat, samba-dbg, libsmbclient-dev, python-samba, samba-common, libpam-smbpass

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
swat - 3.0.24-6etch1
winbind - 3.0.24-6etch1
smbfs - 3.0.24-6etch1
samba-common - 3.0.24-6etch1
libsmbclient-dev - 3.0.24-6etch1
samba-dbg - 3.0.24-6etch1
python-samba - 3.0.24-6etch1
libpam-smbpass - 3.0.24-6etch1
smbclient - 3.0.24-6etch1
samba - 3.0.24-6etch1
libsmbclient - 3.0.24-6etch1
s390x:
libsmbclient-dev - 3.0.24-6etch1
libsmbclient - 3.0.24-6etch1
swat - 3.0.24-6etch1
samba-dbg - 3.0.24-6etch1
winbind - 3.0.24-6etch1
python-samba - 3.0.24-6etch1
libpam-smbpass - 3.0.24-6etch1
smbfs - 3.0.24-6etch1
samba-common - 3.0.24-6etch1
samba - 3.0.24-6etch1
smbclient - 3.0.24-6etch1
i686:
samba-common - 3.0.24-6etch1
samba - 3.0.24-6etch1
winbind - 3.0.24-6etch1
python-samba - 3.0.24-6etch1
samba-dbg - 3.0.24-6etch1
smbfs - 3.0.24-6etch1
libpam-smbpass - 3.0.24-6etch1
libsmbclient - 3.0.24-6etch1
swat - 3.0.24-6etch1
smbclient - 3.0.24-6etch1
libsmbclient-dev - 3.0.24-6etch1
hppa:
libsmbclient-dev - 3.0.24-6etch1
smbclient - 3.0.24-6etch1
libpam-smbpass - 3.0.24-6etch1
libsmbclient - 3.0.24-6etch1
smbfs - 3.0.24-6etch1
python-samba - 3.0.24-6etch1
samba-dbg - 3.0.24-6etch1
winbind - 3.0.24-6etch1
swat - 3.0.24-6etch1
samba-common - 3.0.24-6etch1
samba - 3.0.24-6etch1
sparc:
samba-dbg - 3.0.24-6etch1
samba - 3.0.24-6etch1
libpam-smbpass - 3.0.24-6etch1
python-samba - 3.0.24-6etch1
samba-common - 3.0.24-6etch1
smbfs - 3.0.24-6etch1
libsmbclient-dev - 3.0.24-6etch1
winbind - 3.0.24-6etch1
smbclient - 3.0.24-6etch1
libsmbclient - 3.0.24-6etch1
swat - 3.0.24-6etch1
x86-64:
samba-common - 3.0.24-6etch1
smbclient - 3.0.24-6etch1
swat - 3.0.24-6etch1
samba - 3.0.24-6etch1
winbind - 3.0.24-6etch1
samba-dbg - 3.0.24-6etch1
libsmbclient - 3.0.24-6etch1
smbfs - 3.0.24-6etch1
python-samba - 3.0.24-6etch1
libpam-smbpass - 3.0.24-6etch1
libsmbclient-dev - 3.0.24-6etch1
alpha:
samba-dbg - 3.0.24-6etch1
smbclient - 3.0.24-6etch1
winbind - 3.0.24-6etch1
libsmbclient - 3.0.24-6etch1
python-samba - 3.0.24-6etch1
swat - 3.0.24-6etch1
smbfs - 3.0.24-6etch1
samba - 3.0.24-6etch1
libpam-smbpass - 3.0.24-6etch1
samba-common - 3.0.24-6etch1
libsmbclient-dev - 3.0.24-6etch1
ia64:
samba-dbg - 3.0.24-6etch1
smbfs - 3.0.24-6etch1
libsmbclient - 3.0.24-6etch1
smbclient - 3.0.24-6etch1
winbind - 3.0.24-6etch1
libpam-smbpass - 3.0.24-6etch1
python-samba - 3.0.24-6etch1
samba-common - 3.0.24-6etch1
swat - 3.0.24-6etch1
samba - 3.0.24-6etch1
libsmbclient-dev - 3.0.24-6etch1
mips:
libpam-smbpass - 3.0.24-6etch1
libsmbclient - 3.0.24-6etch1
winbind - 3.0.24-6etch1
python-samba - 3.0.24-6etch1
smbclient - 3.0.24-6etch1
samba - 3.0.24-6etch1
smbfs - 3.0.24-6etch1
swat - 3.0.24-6etch1
libsmbclient-dev - 3.0.24-6etch1
samba-common - 3.0.24-6etch1
samba-dbg - 3.0.24-6etch1
noarch:
samba-doc - 3.0.24-6etch1
samba-doc-pdf - 3.0.24-6etch1
mipsel:
samba-common - 3.0.24-6etch1
samba - 3.0.24-6etch1
libsmbclient-dev - 3.0.24-6etch1
swat - 3.0.24-6etch1
smbfs - 3.0.24-6etch1
winbind - 3.0.24-6etch1
smbclient - 3.0.24-6etch1
libsmbclient - 3.0.24-6etch1
samba-dbg - 3.0.24-6etch1
libpam-smbpass - 3.0.24-6etch1
python-samba - 3.0.24-6etch1
arm:
libsmbclient - 3.0.24-6etch1
samba-dbg - 3.0.24-6etch1
python-samba - 3.0.24-6etch1
winbind - 3.0.24-6etch1
smbclient - 3.0.24-6etch1
samba - 3.0.24-6etch1
libpam-smbpass - 3.0.24-6etch1
libsmbclient-dev - 3.0.24-6etch1
samba-common - 3.0.24-6etch1
swat - 3.0.24-6etch1
smbfs - 3.0.24-6etch1

http://www.debian.org/security/dsa-1291/

Источник: CVE
Наименование: CVE-2007-2446
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2446

Источник: CVE
Наименование: CVE-2007-2447
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2447

Источник: CVE
Наименование: CVE-2007-2444
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2444