Samba:
2016-12-28

Symlink race allows access outside share definition.

CVE-2017-2619
samba-4.3.11p1.tgz