UbuntuUpdates.org

Package "samba"

Name: samba

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • clustered database to store temporary data
  • tools for viewing and manipulating the Windows registry
  • test suite from Samba

Latest version: 2:4.10.0+dfsg-0ubuntu2.4
Release: disco (19.04)
Level: security
Repository: universe

Links

Save this URL for the latest version of "samba": https://www.ubuntuupdates.org/samba



Other versions of "samba" in Disco

Repository Area Version
base main 2:4.10.0+dfsg-0ubuntu2
base universe 2:4.10.0+dfsg-0ubuntu2
security main 2:4.10.0+dfsg-0ubuntu2.4
updates universe 2:4.10.0+dfsg-0ubuntu2.4
updates main 2:4.10.0+dfsg-0ubuntu2.4

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2:4.10.0+dfsg-0ubuntu2.4 2019-09-03 22:07:16 UTC

  samba (2:4.10.0+dfsg-0ubuntu2.4) disco-security; urgency=medium

  * SECURITY UPDATE: restricted share escape by user
    - debian/patches/CVE-2019-10197-01-v4-10.patch: smbd: separate
      out impersonation debug info into a new function.
    - debian/patches/CVE-2019-10197-02-v4-10.patch: smbd: make sure that
      change_to_user_internal() always resets current_user.done_chdir
    - debian/patches/CVE-2019-10197-03-v4-10.patch: smbd: make sure we
      reset current_user.{need,done}_chdir in become_root()
    - debian/patches/CVE-2019-10197-04-v4-10.patch: selftest: make
      fsrvp_share its own independent subdirectory
    - debian/patches/CVE-2019-10197-05-v4-10.patch:
      test_smbclient_s3.sh: add regression test for the no permission
      on share root problem
    - debian/patches/CVE-2019-10197-06-v4-10.patch: smbd: split
      change_to_user_impersonate() out of change_to_user_internal()
    - CVE-2019-10197

 -- Steve Beattie <email address hidden> Fri, 30 Aug 2019 11:01:29 -0700

Source diff to previous version
CVE-2019-10197 A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up ...

Version: 2:4.10.0+dfsg-0ubuntu2.2 2019-06-19 14:06:34 UTC

  samba (2:4.10.0+dfsg-0ubuntu2.2) disco-security; urgency=medium

  * SECURITY UPDATE: zone operations can crash rpc server
    - debian/patches/CVE-2019-12435-1.patch: avoid NULL deference if zone
      not found in DnssrvOperation in
      python/samba/tests/dcerpc/dnsserver.py,
      source4/rpc_server/dnsserver/dcerpc_dnsserver.c.
    - debian/patches/CVE-2019-12435-2.patch: avoid NULL deference if zone
      not found in DnssrvOperation2 in
      python/samba/tests/dcerpc/dnsserver.py,
      source4/rpc_server/dnsserver/dcerpc_dnsserver.c.
    - CVE-2019-12435
  * SECURITY UPDATE: paged_searches crash on LDAP and homes access
    - debian/patches/CVE-2019-12436.patch: ignore successful results
      without messages in source4/dsdb/samdb/ldb_modules/paged_results.c,
      source4/dsdb/tests/python/vlv.py.
    - CVE-2019-12436

 -- Marc Deslauriers <email address hidden> Wed, 12 Jun 2019 10:01:57 -0400

Source diff to previous version
CVE-2019-12435 Samba AD DC Denial of Service in DNS management server (dnsserver)
CVE-2019-12436 Samba AD DC LDAP server crash (paged searches)

Version: 2:4.10.0+dfsg-0ubuntu2.1 2019-05-14 13:07:23 UTC

  samba (2:4.10.0+dfsg-0ubuntu2.1) disco-security; urgency=medium

  * SECURITY UPDATE: Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum
    - debian/patches/CVE-2018-16860-1.patch: add test for S4U2Self with
      unkeyed checksum in selftest/knownfail.d/mitm-s4u2self,
      source4/torture/krb5/kdc-canon-heimdal.c.
    - debian/patches/CVE-2018-16860-2.patch: reject PA-S4U2Self with
      unkeyed checksum in selftest/knownfail.d/mitm-s4u2self,
      source4/heimdal/kdc/krb5tgs.c.
    - CVE-2018-16860

 -- Marc Deslauriers <email address hidden> Wed, 08 May 2019 09:34:42 -0400

CVE-2018-16860 Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum



About   -   Send Feedback to @ubuntu_updates