[ubuntu/bionic-security] samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.26 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Mon Dec 6 13:25:46 UTC 2021

samba (2:4.7.6+dfsg~ubuntu-0ubuntu2.26) bionic-security; urgency=medium

  * SECURITY UPDATE: SMB1 client connections can be downgraded to plaintext
    - debian/patches/CVE-2016-2124-*.patch: upstream commits to fix issue.
    - CVE-2016-2124
  * SECURITY UPDATE: user in AD Domain could become root on domain members
    - debian/patches/CVE-2020-25717-*.patch: upstream commits to fix issue.
    - debian/patches/bug14901-*.patch: upstream commits to fix regression.
    - CVE-2020-25717
  * SECURITY UPDATE: insufficient access and conformance checking of data
    - debian/patches/CVE-2020-25722-1.patch: restrict the setting of
      privileged attributes during LDAP add/modify in
    - debian/patches/CVE-2020-25722-2.patch: ensure the structural
      objectclass cannot be changed in
    - CVE-2020-25722
  * SECURITY UPDATE: null pointer deref in kerberos server
    - debian/patches/CVE-2021-3671.patch: validate sname in TGS-REQ in
    - CVE-2021-3671

samba (2:4.7.6+dfsg~ubuntu-0ubuntu2.24) bionic; urgency=medium

  * samba.postinst: do not populate sambashare from the Ubuntu admin group
    (LP: #1942195)

Date: 2021-12-02 15:31:10.437435+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
-------------- next part --------------
Sorry, changesfile not available.

More information about the Bionic-changes mailing list