[ubuntu/bionic-security] samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.26 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Mon Dec 6 13:25:46 UTC 2021
samba (2:4.7.6+dfsg~ubuntu-0ubuntu2.26) bionic-security; urgency=medium
* SECURITY UPDATE: SMB1 client connections can be downgraded to plaintext
authentication
- debian/patches/CVE-2016-2124-*.patch: upstream commits to fix issue.
- CVE-2016-2124
* SECURITY UPDATE: user in AD Domain could become root on domain members
- debian/patches/CVE-2020-25717-*.patch: upstream commits to fix issue.
- debian/patches/bug14901-*.patch: upstream commits to fix regression.
- CVE-2020-25717
* SECURITY UPDATE: insufficient access and conformance checking of data
stored
- debian/patches/CVE-2020-25722-1.patch: restrict the setting of
privileged attributes during LDAP add/modify in
source4/dsdb/samdb/ldb_modules/samldb.c.
- debian/patches/CVE-2020-25722-2.patch: ensure the structural
objectclass cannot be changed in
source4/dsdb/samdb/ldb_modules/objectclass.c.
- CVE-2020-25722
* SECURITY UPDATE: null pointer deref in kerberos server
- debian/patches/CVE-2021-3671.patch: validate sname in TGS-REQ in
source4/heimdal/kdc/krb5tgs.c.
- CVE-2021-3671
samba (2:4.7.6+dfsg~ubuntu-0ubuntu2.24) bionic; urgency=medium
* samba.postinst: do not populate sambashare from the Ubuntu admin group
(LP: #1942195)
Date: 2021-12-02 15:31:10.437435+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.26
-------------- next part --------------
Sorry, changesfile not available.
More information about the Bionic-changes
mailing list