UbuntuUpdates.org

Package "samba"

Name: samba

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • clustered database to store temporary data
  • Samba nameservice integration plugins
  • Windows domain authentication integration plugin
  • tools for viewing and manipulating the Windows registry
Latest version: 2:4.3.11+dfsg-0ubuntu0.16.04.24
Release: xenial (16.04)
Level: security
Repository: universe

Links

Save this URL for the latest version of "samba": https://www.ubuntuupdates.org/samba

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "samba" in Xenial

Repository Area Version
base main 2:4.3.8+dfsg-0ubuntu1
base universe 2:4.3.8+dfsg-0ubuntu1
security main 2:4.3.11+dfsg-0ubuntu0.16.04.24
updates main 2:4.3.11+dfsg-0ubuntu0.16.04.24
updates universe 2:4.3.11+dfsg-0ubuntu0.16.04.24

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2:4.3.11+dfsg-0ubuntu0.16.04.24 2019-12-10 14:07:03 UTC

  samba (2:4.3.11+dfsg-0ubuntu0.16.04.24) xenial-security; urgency=medium

  * SECURITY UPDATE: Samba AD DC zone-named record Denial of Service in DNS
    management server
    - debian/patches/CVE-2019-14861-1.patch: confirm sort behaviour in
      dcesrv_DnssrvEnumRecords.
    - debian/patches/CVE-2019-14861-2.patch: remove special case for @ in
      dns_build_tree().
    - debian/patches/CVE-2019-14861-3.patch: avoid crash in ldb_qsort() via
      dcesrv_DnssrvEnumRecords.
    - debian/patches/CVE-2019-14861-4.patch: test to demonstrate the bug.
    - CVE-2019-14861
  * SECURITY UPDATE: DelegationNotAllowed not being enforced in protocol
    transition on Samba AD DC
    - debian/patches/CVE-2019-14870-1.patch: add user-sensitive command to
      set not-delegated flag.
    - debian/patches/CVE-2019-14870-2.patch: heimdal: add S4U test for
      delegation_not_allowed.
    - debian/patches/CVE-2019-14870-3.patch: heimdal: enforce
      delegation_not_allowed in S4U2Self.
    - debian/patches/CVE-2019-14870-4.patch: mit-kdc: enforce
      delegation_not_allowed flag.
    - CVE-2019-14870

 -- Marc Deslauriers <email address hidden> Fri, 29 Nov 2019 11:22:44 -0500
Source diff to previous version
CVE-2019-14861 RESERVED
CVE-2019-14870 RESERVED

Version: 2:4.3.11+dfsg-0ubuntu0.16.04.23 2019-10-29 13:06:20 UTC

  samba (2:4.3.11+dfsg-0ubuntu0.16.04.23) xenial-security; urgency=medium

  * SECURITY UPDATE: client code can return filenames containing path
    separators
    - debian/patches/CVE-2019-10218-1.patch: protect SMB1 client code
      from evil server returned names in source3/libsmb/clilist.c,
      source3/libsmb/proto.h.
    - debian/patches/CVE-2019-10218-2.patch: Protect SMB2 client code
      from evil server returned names in source3/libsmb/cli_smb2_fnum.c.
    - CVE-2019-10218
  * SECURITY UPDATE: User with "get changes" permission can crash AD DC
    LDAP server via dirsync
    - debian/patches/CVE-2019-14847-1.patch: ensure attrs exist in
      source4/dsdb/samdb/ldb_modules/dirsync.c.
    - debian/patches/CVE-2019-14847-2.patch: demonstrate the correct
      interaction of ranged_results style attributes and dirsync in
      source4/dsdb/tests/python/dirsync.py.
    - debian/patches/CVE-2019-14847-3.patch: correct behaviour of
      ranged_results when combined with dirsync in
      source4/dsdb/samdb/ldb_modules/dirsync.c,
      source4/dsdb/samdb/ldb_modules/ranged_results.c.
    - CVE-2019-14847

 -- Marc Deslauriers <email address hidden> Mon, 21 Oct 2019 08:53:51 -0400
Source diff to previous version

Version: 2:4.3.11+dfsg-0ubuntu0.16.04.21 2019-05-27 12:06:18 UTC

  samba (2:4.3.11+dfsg-0ubuntu0.16.04.21) xenial-security; urgency=medium

  * SECURITY REGRESSION: panics following recent update (LP: #1827924)
    - debian/patches/bug13315.patch: do not crash if we fail to init the
      session table in source3/smbd/negprot.c.

 -- Marc Deslauriers <email address hidden> Thu, 23 May 2019 08:08:58 -0400
Source diff to previous version
1827924 Panic or segfault in Samba

Version: 2:4.3.11+dfsg-0ubuntu0.16.04.20 2019-05-14 13:07:17 UTC

  samba (2:4.3.11+dfsg-0ubuntu0.16.04.20) xenial-security; urgency=medium

  * SECURITY UPDATE: Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum
    - debian/patches/CVE-2018-16860.patch: reject PA-S4U2Self with unkeyed
      checksum in source4/heimdal/kdc/krb5tgs.c.
    - CVE-2018-16860

 -- Marc Deslauriers <email address hidden> Wed, 08 May 2019 09:44:23 -0400
Source diff to previous version
CVE-2018-16860 Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum

Version: 2:4.3.11+dfsg-0ubuntu0.16.04.19 2019-04-08 14:07:05 UTC

  samba (2:4.3.11+dfsg-0ubuntu0.16.04.19) xenial-security; urgency=medium

  * SECURITY UPDATE: save registry file outside share as unprivileged user
    - debian/patches/CVE-2019-3880.patch: remove implementations of
      SaveKey/RestoreKey in source3/rpc_server/winreg/srv_winreg_nt.c.
    - CVE-2019-3880

 -- Marc Deslauriers <email address hidden> Mon, 01 Apr 2019 10:09:39 -0400
CVE-2019-3880 Save registry file outside share as unprivileged user


About   -   Send Feedback to @ubuntu_updates