Multiple vulnerabilities have been found in Samba, the worst of which could lead to remote code execution.
Package | net-fs/samba on all architectures |
---|---|
Affected versions | < 4.11.6 |
Unaffected versions | revision >= 4.9.18 revision >= 4.10.13 revision >= 4.11.6 |
Samba is a suite of SMB and CIFS client/server programs.
Multiple vulnerabilities have been discovered in Samba. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly execute arbitrary code, cause a Denial of Service condition, conduct a man-in-the-middle attack, or obtain sensitive information.
There is no known workaround at this time.
All Samba 4.9.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-fs/samba-4.9.18"
All Samba 4.10.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-fs/samba-4.10.13"
All Samba 4.11.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-fs/samba-4.11.6"