cifs-utils-4.8.1-10.AXS4

エラータID: AXSA:2012-595:02

Release date: 
Wednesday, July 25, 2012 - 10:03
Subject: 
cifs-utils-4.8.1-10.AXS4
Affected Channels: 
Asianux Server 4 for x86
Asianux Server 4 for x86_64
Severity: 
High
Description: 

The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. This package contains tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system.

Security issues fixed with this release:

• CVE-2012-1586
No description available at the time of writing, please use the CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2012-1586
mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.


Additional Info: 

N/A

Download: 

SRPMS
  1. cifs-utils-4.8.1-10.AXS4.src.rpm
    MD5: b8a808788bbd1fddc121f2b19cd3bdaf
    SHA-256: bd8e658fc6f3d68eccdee7c768def5ded905b176a3be3ade1f5a6c5a1beff69a
    Size: 344.81 kB

Asianux Server 4 for x86
  1. cifs-utils-4.8.1-10.AXS4.i686.rpm
    MD5: 464f276d0b971ad0e4aedffecc5d21a8
    SHA-256: 8128a5aab7b0687b6894140e59646fcfc5cd7402dde40aa751c90fd64a4233c2
    Size: 45.21 kB

Asianux Server 4 for x86_64
  1. cifs-utils-4.8.1-10.AXS4.x86_64.rpm
    MD5: 8d2438e303c2c97abf7b3ce2b745fb50
    SHA-256: 3a5a56ffa6e7609c2cf3df6c939a42e90ac39ec92bf6bbcb0d6bc90898ca9eae
    Size: 44.64 kB