Errata overview
Errata ID 148
Date 2014-07-14
Source package samba
Fixed in version 4.1.0-1.652.201407091607
Description
* These four security vulnerabilities have been fixed:
  * Denial of service (infinite CPU loop) in nmbd
  * Denial of service (daemon crash) in the smbd file server daemon
  * Information leak in shadow_copy VFS module (not used in the default
    configuration)
  * Incorrect parsing of the require_membership_of option in Winbind
* Additionally this update fixes an issue which caused a problem for the
  Windows DPAPI. To users it appeared as if stored credentials for Windows
  applications would not be remembered any longer by the applications
  after they changed the logon password for their account. Domains
  affected by this need to manually remove the object
  "CN=BCKUPKEY_PREFERRED Secret" from the Samba directory service after
  the update to make Samba internally generate a new ticket for the 
  Backupkey protocol.
Additional notes
CVE ID CVE-2014-0244
CVE-2014-3493
CVE-2012-6150
CVE-2014-0178
UCS Bug number #35192
#35287