ALT Linux Team

Branch c7 update on 2016-09-02

2016-09-02

ALT-BU-2016-2963-1

Branch c7 update bulletin.

ALT-PU-2016-1912-1

Package wine updated to version 1.9.3-alt0.M70C.1 for branch c7 in task 166567.

Closed bugs

Bug #31005

Wine собран без liblcms2

Bug #31006

Wine собран без liblcms2

Bug #31015

winegstreamer broken with >=glib-2.32.0

ALT-PU-2016-1913-1

Package wine-vanilla updated to version 1.9.12-alt0.M70C.1 for branch c7 in task 166567.

Closed bugs

Bug #30382

Обновить winetrick до 20140302

Bug #31006

Wine собран без liblcms2

Bug #31014

winegstreamer broken with >=glib-2.32.0

Bug #31024

Предложение по улучшению wine

Bug #31149

wine-vanilla-full не устанавливает wine-mono

ALT-PU-2016-1914-1

Package apt-repo updated to version 1.3.7-alt1 for branch c7 in task 166580.

Closed bugs

Bug #31385

FR: edit sources.list(.d) in non-standard locations

Bug #31577

1.2.0-alt1 добавляет несуществующий репозитарий "x86_64-i586 task"

Bug #31974

[FR] добавлять таски в sources.list в другом формате

Bug #32006

Добавить p8

Bug #32045

Излишние предупреждения интерпретатора

ALT-PU-2016-1918-1

Package samba-DC updated to version 4.4.5-alt0.M70C.1 for branch c7 in task 166820.

Closed vulnerabilities

Published: 2016-07-07

BDU:2016-01705

Уязвимость файловой системы Samba, позволяющая нарушителю подменить протоколы SMB2 и SMB3 серверов

Severity: MEDIUM (6.8)
References:
Published: 2016-07-07
Modified: 2024-11-21

CVE-2016-2119

libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof SMB2 and SMB3 servers, via the (1) SMB2_SESSION_FLAG_IS_GUEST or (2) SMB2_SESSION_FLAG_IS_NULL flag.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
References:

ALT-PU-2016-1919-1

Package samba updated to version 4.3.11-alt0.M70C.1 for branch c7 in task 166820.

Closed vulnerabilities

Published: 2016-07-07

BDU:2016-01705

Уязвимость файловой системы Samba, позволяющая нарушителю подменить протоколы SMB2 и SMB3 серверов

Severity: MEDIUM (6.8)
References:
Published: 2016-07-07
Modified: 2024-11-21

CVE-2016-2119

libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof SMB2 and SMB3 servers, via the (1) SMB2_SESSION_FLAG_IS_GUEST or (2) SMB2_SESSION_FLAG_IS_NULL flag.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top