[Buildroot] [PATCH 1/1] package/cifs-utils: security bump to version 6.13

Peter Korsgaard peter at korsgaard.com
Sat May 8 14:36:54 UTC 2021


>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice at gmail.com> writes:

 > Fix CVE-2021-20208: A flaw was found in cifs-utils in versions before
 > 6.13. A user when mounting a krb5 CIFS file system from within a
 > container can use Kerberos credentials of the host. The highest threat
 > from this vulnerability is to data confidentiality and integrity.

 > https://lists.samba.org/archive/samba-technical/2021-April/136467.html

 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>

Committed to 2021.02.x, thanks.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list