samba4Full: 4.3.6 -> 4.3.8 (#14661)
Fixes the following security issues: * CVE-2015-5370 (Multiple errors in DCE-RPC code) * CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP) * CVE-2016-2111 (NETLOGON Spoofing Vulnerability) * CVE-2016-2112 (LDAP client and server don't enforce integrity) * CVE-2016-2113 (Missing TLS certificate validation) * CVE-2016-2114 ("server signing = mandatory" not enforced) * CVE-2016-2115 (SMB IPC traffic is not integrity protected) * CVE-2016-2118 (SAMR and LSA man in the middle attacks possible) See http://badlock.org/ for details.
parent
04267ed6
Please register or sign in to comment