DSA-3951-1 smb4k -- security update

Debian Security Advisory

DSA-3951-1 smb4k -- security update

Date Reported:

22 Aug 2017

Affected Packages:

smb4k

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2017-8849.

More information:

Sebastian Krahmer discovered that a programming error in the mount helper binary of the Smb4k Samba network share browser may result in local privilege escalation.

For the oldstable distribution (jessie), this problem has been fixed in version 1.2.1-2~deb8u1.

We recommend that you upgrade your smb4k packages.