Errata overview
Errata ID 389
Date 2015-12-16
Source package samba
Fixed in version 2:4.1.0-1.821.201512142147
Description
This update addresses the following issues:
* Samba may expose Windows DCs to MS15-096 Denial of Service via the
  creation of multiple machine accounts. Pure Samba domains as in UCS
  are not affected directly (CVE-2015-2535)
* Malicious request can cause Samba LDAP server to hang consuming CPU time
  (CVE-2015-3223)
* Insufficient symlink verification (file access outside of share)
  (CVE-2015-5252)
* Samba client requesting encryption vulnerable to downgrade attack
  (CVE-2015-5296)
* Missing access control check in the VFS shadow_copy2 module could allow
  unauthorized users to access snapshots (CVE-2015-5299)
* Remote read of uninitialized memory from Samba LDAP server (CVE-2015-5330)
* Remote Denial of Service in Samba/AD LDAP server (CVE-2015-7540)
Additional notes
CVE ID CVE-2015-2535
CVE-2015-3223
CVE-2015-5252
CVE-2015-5296
CVE-2015-5299
CVE-2015-5330
CVE-2015-7540
UCS Bug number #40223