[ubuntu/artful-proposed] samba 2:4.5.8+dfsg-0ubuntu1 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Wed May 24 13:37:16 UTC 2017


samba (2:4.5.8+dfsg-0ubuntu1) artful; urgency=medium

  * SECURITY UPDATE: remote code execution from a writable share
    - debian/patches/CVE-2017-7494.patch: refuse to open pipe names with a
      slash inside in source3/rpc_server/srv_pipe.c.
    - CVE-2017-7494

Date: Wed, 24 May 2017 07:39:13 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/samba/2:4.5.8+dfsg-0ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 24 May 2017 07:39:13 -0400
Source: samba
Binary: samba samba-libs samba-common samba-common-bin smbclient samba-testsuite registry-tools libparse-pidl-perl samba-dev python-samba samba-dsdb-modules samba-vfs-modules libsmbclient libsmbclient-dev winbind libpam-winbind libnss-winbind libwbclient0 libwbclient-dev ctdb
Architecture: source
Version: 2:4.5.8+dfsg-0ubuntu1
Distribution: artful
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 ctdb       - clustered database to store temporary data
 libnss-winbind - Samba nameservice integration plugins
 libpam-winbind - Windows domain authentication integration plugin
 libparse-pidl-perl - IDL compiler written in Perl
 libsmbclient - shared library for communication with SMB/CIFS servers
 libsmbclient-dev - development files for libsmbclient
 libwbclient-dev - Samba winbind client library - development files
 libwbclient0 - Samba winbind client library
 python-samba - Python bindings for Samba
 registry-tools - tools for viewing and manipulating the Windows registry
 samba      - SMB/CIFS file, print, and login server for Unix
 samba-common - common files used by both the Samba server and client
 samba-common-bin - Samba common files used by both the server and the client
 samba-dev  - tools for extending Samba
 samba-dsdb-modules - Samba Directory Services Database
 samba-libs - Samba core libraries
 samba-testsuite - test suite from Samba
 samba-vfs-modules - Samba Virtual FileSystem plugins
 smbclient  - command-line SMB/CIFS clients for Unix
 winbind    - service to resolve user and group information from Windows NT ser
Changes:
 samba (2:4.5.8+dfsg-0ubuntu1) artful; urgency=medium
 .
   * SECURITY UPDATE: remote code execution from a writable share
     - debian/patches/CVE-2017-7494.patch: refuse to open pipe names with a
       slash inside in source3/rpc_server/srv_pipe.c.
     - CVE-2017-7494
Checksums-Sha1:
 a4034fe9be4d474adf3de2d404dca7b305bd4ada 4051 samba_4.5.8+dfsg-0ubuntu1.dsc
 169db7ce418460fd74487c0f16533089b9bc27f3 20970903 samba_4.5.8+dfsg.orig.tar.gz
 62dba69f5e7201efd5c3b9ac652f5aed402ac838 233032 samba_4.5.8+dfsg-0ubuntu1.debian.tar.xz
 7517f463ac56223417fd06ff251c10be1be0322e 10979 samba_4.5.8+dfsg-0ubuntu1_source.buildinfo
Checksums-Sha256:
 bc21da5b5af2eafa7db870e2bcab1cd2da8b0aaf0e2e0749b408786a217818b7 4051 samba_4.5.8+dfsg-0ubuntu1.dsc
 e36607eaae16cff5725e616d9a3450dc0b34a1f968c49a3af019fd97a095d965 20970903 samba_4.5.8+dfsg.orig.tar.gz
 9b4e3ac8024057d5dc9bcce9420234e8c81aff893c173c570f5ef82207ecfcae 233032 samba_4.5.8+dfsg-0ubuntu1.debian.tar.xz
 284f2e98ca99898b7db4469cceb630b779b66a99440dab89c7596cffb6275a0f 10979 samba_4.5.8+dfsg-0ubuntu1_source.buildinfo
Files:
 cebffc5e8f856e4dc95112ea0ae9d1ad 4051 net optional samba_4.5.8+dfsg-0ubuntu1.dsc
 0c9517553c78a05cf75558ff12125153 20970903 net optional samba_4.5.8+dfsg.orig.tar.gz
 896d73f86204f4559ad65f70f25ffd59 233032 net optional samba_4.5.8+dfsg-0ubuntu1.debian.tar.xz
 191b978543155353b2dd7fae52b1a56b 10979 net optional samba_4.5.8+dfsg-0ubuntu1_source.buildinfo
Original-Maintainer: Debian Samba Maintainers <pkg-samba-maint at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=jKQ1
-----END PGP SIGNATURE-----


More information about the Artful-changes mailing list