tocsin

Debian/samba: critical 10

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from

Action: Upgrade samba to 2:4.17.12+dfsg-0+deb12u3 or later.

Affected

introducedfixedlast affected
02:4.17.12+dfsg-0+deb12u3-

Fixed versions

2:4.17.12+dfsg-0+deb12u3

Sources

published · modified · JSON