Branch p7 update bulletin.

Package mplayer updated to version 1.1.1-alt11.M70P.1 for branch p7 in task 120693.

Устаревшая сборка

Package samba updated to version 4.0.18-alt0.M70P.1 for branch p7 in task 120592.

Published: 2014-05-28

BDU:2015-00386

Уязвимость программного обеспечения Samba, позволяющая удаленному злоумышленнику нарушить конфиденциальность защищаемой информации

Severity: LOW (3.5)

References:

Published: 2014-05-28

BDU:2015-00391

Уязвимость программного обеспечения Samba, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации

Severity: HIGH (7.5) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Published: 2014-06-23

BDU:2015-01180

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность защищаемой информации

Severity: MEDIUM (6.5) Vector: AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Published: 2014-08-05

BDU:2015-06035

Уязвимости операционной системы Red Hat Enterprise Linux, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-06036

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-06037

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-06038

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-06039

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-06040

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-06041

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-06042

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-06043

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-06044

Severity: HIGH (8.3) Vector: AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

References:

Published: 2014-08-05

BDU:2015-06045

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-06046

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-06047

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-06048

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-06050

Severity: HIGH (7.9)

References:

Published: 2014-08-05

BDU:2015-09096

Уязвимости операционной системы CentOS, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-09097

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-09098

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-09099

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-09100

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-09101

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-09102

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-09103

Severity: LOW (3.4) Vector: AV:A/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L

References:

Published: 2014-08-05

BDU:2015-09104

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-09105

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-09106

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-09107

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-09108

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-09109

Severity: HIGH (8.3)

References:

Published: 2014-08-05

BDU:2015-09110

Severity: HIGH (7.9)

References:

Published: 2014-05-28
Modified: 2024-11-21

CVE-2014-0178

Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memory via a (1) FSCTL_GET_SHADOW_COPY_DATA or (2) FSCTL_SRV_ENUMERATE_SNAPSHOTS request.

Severity: LOW (3.5)

References:

Published: 2014-05-28
Modified: 2024-11-21

CVE-2014-0239

The internal DNS server in Samba 4.x before 4.0.18 does not check the QR field in the header section of an incoming DNS message before sending a response, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged response packet that triggers a communication loop, a related issue to CVE-1999-0103.

Severity: MEDIUM (5.0)

References:

Version: 2.1.0

ALT-BU-2014-2803-1

Closed bugs

Closed vulnerabilities