Scientific Linux: CVE-2012-1182 Critical: Samba3x Security Update

Date: Tue, 10 Apr 2012 08:21:13 -0500
Reply-To: Pat Riehecky 
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Organization: Fermilab
Subject: FASTBUGS for SL 6x i386, x86_64 now available
MIME-Version: 1.0

The following FASTBUGS have been uploaded to

i386:
cpio-2.10-10.el6.i686.rpm
db4-4.7.25-17.el6.i686.rpm
db4-cxx-4.7.25-17.el6.i686.rpm
db4-devel-4.7.25-17.el6.i686.rpm
db4-devel-static-4.7.25-17.el6.i686.rpm
db4-java-4.7.25-17.el6.i686.rpm
db4-tcl-4.7.25-17.el6.i686.rpm
db4-utils-4.7.25-17.el6.i686.rpm
expect-5.44.1.15-4.el6.i686.rpm
expect-devel-5.44.1.15-4.el6.i686.rpm
expectk-5.44.1.15-4.el6.i686.rpm
gdm-2.30.4-33.el6_2.i686.rpm
gdm-libs-2.30.4-33.el6_2.i686.rpm
gdm-plugin-fingerprint-2.30.4-33.el6_2.i686.rpm
gdm-plugin-smartcard-2.30.4-33.el6_2.i686.rpm
gdm-user-switch-applet-2.30.4-33.el6_2.i686.rpm
kdeartwork-4.3.4-7.el6.i686.rpm
kdeartwork-screensavers-4.3.4-7.el6.i686.rpm
kdeartwork-sounds-4.3.4-7.el6.noarch.rpm
kdeartwork-wallpapers-4.3.4-7.el6.noarch.rpm
kde-style-phase-4.3.4-7.el6.i686.rpm
libarchive-2.8.3-4.el6_2.i686.rpm
libarchive-devel-2.8.3-4.el6_2.i686.rpm
libtar-1.2.11-17.el6.i686.rpm
libtar-devel-1.2.11-17.el6.i686.rpm
libuser-0.56.13-5.el6.i386.rpm
libuser-devel-0.56.13-5.el6.i386.rpm
libuser-python-0.56.13-5.el6.i386.rpm
lsof-4.82-4.el6.i686.rpm
make-3.81-20.el6.i686.rpm
man-1.6f-30.el6.i686.rpm
man-pages-fr-3.23-9.el6.noarch.rpm
nuvola-icon-theme-4.3.4-7.el6.noarch.rpm
pcre-7.8-4.el6.i686.rpm
pcre-devel-7.8-4.el6.i686.rpm
pcre-static-7.8-4.el6.i686.rpm
portreserve-0.0.4-9.el6.i686.rpm
procps-3.2.8-23.el6.i686.rpm
procps-devel-3.2.8-23.el6.i686.rpm
SDL-1.2.14-3.el6.i686.rpm
SDL-devel-1.2.14-3.el6.i686.rpm
SDL-static-1.2.14-3.el6.i686.rpm
system-config-printer-1.1.16-23.el6.i686.rpm
system-config-printer-libs-1.1.16-23.el6.i686.rpm
system-config-printer-udev-1.1.16-23.el6.i686.rpm
vim-common-7.2.411-1.8.el6.i686.rpm
vim-enhanced-7.2.411-1.8.el6.i686.rpm
vim-minimal-7.2.411-1.8.el6.i686.rpm
vim-X11-7.2.411-1.8.el6.i686.rpm

x86_64:
cpio-2.10-10.el6.x86_64.rpm
db4-4.7.25-17.el6.i686.rpm
db4-4.7.25-17.el6.x86_64.rpm
db4-cxx-4.7.25-17.el6.i686.rpm
db4-cxx-4.7.25-17.el6.x86_64.rpm
db4-devel-4.7.25-17.el6.i686.rpm
db4-devel-4.7.25-17.el6.x86_64.rpm
db4-devel-static-4.7.25-17.el6.x86_64.rpm
db4-java-4.7.25-17.el6.x86_64.rpm
db4-tcl-4.7.25-17.el6.x86_64.rpm
db4-utils-4.7.25-17.el6.x86_64.rpm
expect-5.44.1.15-4.el6.x86_64.rpm
expect-devel-5.44.1.15-4.el6.i686.rpm
expect-devel-5.44.1.15-4.el6.x86_64.rpm
expectk-5.44.1.15-4.el6.x86_64.rpm
gdm-2.30.4-33.el6_2.x86_64.rpm
gdm-libs-2.30.4-33.el6_2.i686.rpm
gdm-libs-2.30.4-33.el6_2.x86_64.rpm
gdm-plugin-fingerprint-2.30.4-33.el6_2.x86_64.rpm
gdm-plugin-smartcard-2.30.4-33.el6_2.x86_64.rpm
gdm-user-switch-applet-2.30.4-33.el6_2.x86_64.rpm
kdeartwork-4.3.4-7.el6.x86_64.rpm
kdeartwork-screensavers-4.3.4-7.el6.x86_64.rpm
kdeartwork-sounds-4.3.4-7.el6.noarch.rpm
kdeartwork-wallpapers-4.3.4-7.el6.noarch.rpm
kde-style-phase-4.3.4-7.el6.i686.rpm
kde-style-phase-4.3.4-7.el6.x86_64.rpm
libarchive-2.8.3-4.el6_2.i686.rpm
libarchive-2.8.3-4.el6_2.x86_64.rpm
libarchive-devel-2.8.3-4.el6_2.i686.rpm
libarchive-devel-2.8.3-4.el6_2.x86_64.rpm
libtar-1.2.11-17.el6.i686.rpm
libtar-1.2.11-17.el6.x86_64.rpm
libtar-devel-1.2.11-17.el6.i686.rpm
libtar-devel-1.2.11-17.el6.x86_64.rpm
libuser-0.56.13-5.el6.x86_64.rpm
libuser-devel-0.56.13-5.el6.x86_64.rpm
libuser-python-0.56.13-5.el6.x86_64.rpm
lsof-4.82-4.el6.x86_64.rpm
make-3.81-20.el6.x86_64.rpm
man-1.6f-30.el6.x86_64.rpm
man-pages-fr-3.23-9.el6.noarch.rpm
nuvola-icon-theme-4.3.4-7.el6.noarch.rpm
pcre-7.8-4.el6.i686.rpm
pcre-7.8-4.el6.x86_64.rpm
pcre-devel-7.8-4.el6.i686.rpm
pcre-devel-7.8-4.el6.x86_64.rpm
pcre-static-7.8-4.el6.x86_64.rpm
portreserve-0.0.4-9.el6.x86_64.rpm
procps-3.2.8-23.el6.x86_64.rpm
procps-devel-3.2.8-23.el6.x86_64.rpm
SDL-1.2.14-3.el6.i686.rpm
SDL-1.2.14-3.el6.x86_64.rpm
SDL-devel-1.2.14-3.el6.i686.rpm
SDL-devel-1.2.14-3.el6.x86_64.rpm
SDL-static-1.2.14-3.el6.x86_64.rpm
system-config-printer-1.1.16-23.el6.x86_64.rpm
system-config-printer-libs-1.1.16-23.el6.x86_64.rpm
system-config-printer-udev-1.1.16-23.el6.x86_64.rpm
vim-common-7.2.411-1.8.el6.x86_64.rpm
vim-enhanced-7.2.411-1.8.el6.x86_64.rpm
vim-minimal-7.2.411-1.8.el6.x86_64.rpm
vim-X11-7.2.411-1.8.el6.x86_64.rpm
Date: Wed, 11 Apr 2012 09:05:33 -0500
Reply-To: This email address is being protected from spambots. You need JavaScript enabled to view it.
Sender: Security Errata for Scientific Linux
 
From: Patrick Riehecky 
Subject: Security ERRATA Critical: samba3x on SL5.x i386/x86_64
Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it.

Synopsis: Critical: samba3x security update
Issue Date: 2012-04-10
CVE Numbers: CVE-2012-1182

Samba is an open-source implementation of the Server Message Block (SMB) or
Common Internet File System (CIFS) protocol, which allows PC-compatible
machines to share files, printers, and other information.

A flaw in the Samba suite's Perl-based DCE/RPC IDL (PIDL) compiler, used
to generate code to handle RPC calls, resulted in multiple buffer overflows
in Samba. A remote, unauthenticated attacker could send a specially-crafted
RPC request that would cause the Samba daemon (smbd) to crash or, possibly,
execute arbitrary code with the privileges of the root user.
(CVE-2012-1182)

Users of Samba are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue. After installing this
update, the smb service will be restarted automatically.

SL5:
 i386
 samba3x-3.5.10-0.108.el5_8.i386.rpm
 samba3x-client-3.5.10-0.108.el5_8.i386.rpm
 samba3x-common-3.5.10-0.108.el5_8.i386.rpm
 samba3x-debuginfo-3.5.10-0.108.el5_8.i386.rpm
 samba3x-doc-3.5.10-0.108.el5_8.i386.rpm
 samba3x-domainjoin-gui-3.5.10-0.108.el5_8.i386.rpm
 samba3x-swat-3.5.10-0.108.el5_8.i386.rpm
 samba3x-winbind-3.5.10-0.108.el5_8.i386.rpm
 samba3x-winbind-devel-3.5.10-0.108.el5_8.i386.rpm
 x86_64
 samba3x-3.5.10-0.108.el5_8.x86_64.rpm
 samba3x-client-3.5.10-0.108.el5_8.x86_64.rpm
 samba3x-common-3.5.10-0.108.el5_8.x86_64.rpm
 samba3x-debuginfo-3.5.10-0.108.el5_8.i386.rpm
 samba3x-debuginfo-3.5.10-0.108.el5_8.x86_64.rpm
 samba3x-doc-3.5.10-0.108.el5_8.x86_64.rpm
 samba3x-domainjoin-gui-3.5.10-0.108.el5_8.x86_64.rpm
 samba3x-swat-3.5.10-0.108.el5_8.x86_64.rpm
 samba3x-winbind-3.5.10-0.108.el5_8.i386.rpm
 samba3x-winbind-3.5.10-0.108.el5_8.x86_64.rpm
 samba3x-winbind-devel-3.5.10-0.108.el5_8.i386.rpm
 samba3x-winbind-devel-3.5.10-0.108.el5_8.x86_64.rpm

- Scientific Linux Development Team