Errata overview
Errata ID 156
Date 2014-08-04
Source package samba
Fixed in version 4.1.0-1.653.201408041143
Description
This update fixes a security vulnerability:
* All current versions of Samba 4.x.x are vulnerable to a remote code
  execution vulnerability in the nmbd NetBIOS name services daemon.
  A malicious browser can send packets that may overwrite the heap of
  the target nmbd NetBIOS name services daemon. It may be possible to
  use this to generate a remote code execution vulnerability as the
  superuser (root).
Additional notes
CVE ID CVE-2014-3560
UCS Bug number #35546