[Pkg-samba-maint] CVE-2012-6150 and samba4
    Andrew Bartlett 
    abartlet at samba.org
       
    Fri Jan 24 23:04:37 UTC 2014
    
    
  
I've checked, and this issue does not apply to samba4, because the
'samba4' winbind does not implement this feature at all.  That is, the
problem directive is ignored in all cases.  (This is still fail-open,
but in this case consistently open).  
https://security-tracker.debian.org/tracker/CVE-2012-6150
Thanks,
Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba
    
    
More information about the Pkg-samba-maint
mailing list