Debian: DSA-3433-1 Critical: Samba Denial Of Service Vulnerabilities

CVE-2015-3223

Thilo Uttendorfer of Linux Information Systems AG discovered that a
malicious request can cause the Samba LDAP server to hang, spinning
using CPU. A remote attacker can take advantage of this flaw to
mount a denial of service.

CVE-2015-5252

Jan "Yenya" Kasprzak and the Computer Systems Unit team at Faculty
of Informatics, Masaryk University discovered that insufficient
symlink verification could allow data access outside an exported
share path.

CVE-2015-5296

Stefan Metzmacher of SerNet discovered that Samba does not ensure
that signing is negotiated when creating an encrypted client
connection to a server. This allows a man-in-the-middle attacker to
downgrade the connection and connect using the supplied credentials
as an unsigned, unencrypted connection.

CVE-2015-5299

It was discovered that a missing access control check in the VFS
shadow_copy2 module could allow unauthorized users to access
snapshots.

CVE-2015-5330

Dougl...