samba 2:4.10.0+dfsg-0ubuntu2.6 source package in Ubuntu

Changelog

samba (2:4.10.0+dfsg-0ubuntu2.6) disco-security; urgency=medium

  * SECURITY UPDATE: client code can return filenames containing path
    separators
    - debian/patches/CVE-2019-10218-1.patch: protect SMB1 client code
      from evil server returned names in source3/libsmb/clilist.c,
      source3/libsmb/proto.h.
    - debian/patches/CVE-2019-10218-2.patch: Protect SMB2 client code
      from evil server returned names in source3/libsmb/cli_smb2_fnum.c.
    - CVE-2019-10218
  * SECURITY UPDATE: Samba AD DC check password script does not receive the
    full password
    - debian/patches/CVE-2019-14833-1.patch: use utf8 characters in the
      unacceptable password in selftest/target/Samba4.pm.
    - debian/patches/CVE-2019-14833-2.patch: send full password to check
      password script in source4/dsdb/common/util.c.
    - CVE-2019-14833
  * SECURITY UPDATE: User with "get changes" permission can crash AD DC
    LDAP server via dirsync
    - debian/patches/CVE-2019-14847-1.patch: ensure attrs exist in
      source4/dsdb/samdb/ldb_modules/dirsync.c.
    - debian/patches/CVE-2019-14847-2.patch: demonstrate the correct
      interaction of ranged_results style attributes and dirsync in
      source4/dsdb/tests/python/dirsync.py.
    - debian/patches/CVE-2019-14847-3.patch: correct behaviour of
      ranged_results when combined with dirsync in
      source4/dsdb/samdb/ldb_modules/dirsync.c,
      source4/dsdb/samdb/ldb_modules/ranged_results.c.
    - CVE-2019-14847

 -- Marc Deslauriers <email address hidden>  Mon, 21 Oct 2019 07:40:43 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Disco
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
samba_4.10.0+dfsg.orig.tar.xz 11.0 MiB 1a04f559c9613aa9735546386fdafaba5766af893606c80eb71ca2d4ddd8270c
samba_4.10.0+dfsg-0ubuntu2.6.debian.tar.xz 256.4 KiB 3d02f23ceb502cadff8c514a9247bceff5509952fda581df99017bd4e0c86a3e
samba_4.10.0+dfsg-0ubuntu2.6.dsc 4.1 KiB d4dd7e36e8bfd3241d0312c3a14905e4542f6fe27eff626f7f3a455f6a9089f7

View changes file

Binary packages built by this source

ctdb: No summary available for ctdb in ubuntu disco.

No description available for ctdb in ubuntu disco.

ctdb-dbgsym: No summary available for ctdb-dbgsym in ubuntu disco.

No description available for ctdb-dbgsym in ubuntu disco.

libnss-winbind: No summary available for libnss-winbind in ubuntu disco.

No description available for libnss-winbind in ubuntu disco.

libnss-winbind-dbgsym: No summary available for libnss-winbind-dbgsym in ubuntu disco.

No description available for libnss-winbind-dbgsym in ubuntu disco.

libpam-winbind: No summary available for libpam-winbind in ubuntu disco.

No description available for libpam-winbind in ubuntu disco.

libpam-winbind-dbgsym: No summary available for libpam-winbind-dbgsym in ubuntu disco.

No description available for libpam-winbind-dbgsym in ubuntu disco.

libparse-pidl-perl: No summary available for libparse-pidl-perl in ubuntu disco.

No description available for libparse-pidl-perl in ubuntu disco.

libsmbclient: No summary available for libsmbclient in ubuntu disco.

No description available for libsmbclient in ubuntu disco.

libsmbclient-dbgsym: No summary available for libsmbclient-dbgsym in ubuntu disco.

No description available for libsmbclient-dbgsym in ubuntu disco.

libsmbclient-dev: No summary available for libsmbclient-dev in ubuntu disco.

No description available for libsmbclient-dev in ubuntu disco.

libwbclient-dev: No summary available for libwbclient-dev in ubuntu disco.

No description available for libwbclient-dev in ubuntu disco.

libwbclient0: No summary available for libwbclient0 in ubuntu disco.

No description available for libwbclient0 in ubuntu disco.

libwbclient0-dbgsym: No summary available for libwbclient0-dbgsym in ubuntu disco.

No description available for libwbclient0-dbgsym in ubuntu disco.

python3-samba: No summary available for python3-samba in ubuntu disco.

No description available for python3-samba in ubuntu disco.

python3-samba-dbgsym: No summary available for python3-samba-dbgsym in ubuntu disco.

No description available for python3-samba-dbgsym in ubuntu disco.

registry-tools: No summary available for registry-tools in ubuntu disco.

No description available for registry-tools in ubuntu disco.

registry-tools-dbgsym: No summary available for registry-tools-dbgsym in ubuntu disco.

No description available for registry-tools-dbgsym in ubuntu disco.

samba: No summary available for samba in ubuntu disco.

No description available for samba in ubuntu disco.

samba-common: No summary available for samba-common in ubuntu disco.

No description available for samba-common in ubuntu disco.

samba-common-bin: No summary available for samba-common-bin in ubuntu disco.

No description available for samba-common-bin in ubuntu disco.

samba-common-bin-dbgsym: No summary available for samba-common-bin-dbgsym in ubuntu disco.

No description available for samba-common-bin-dbgsym in ubuntu disco.

samba-dbgsym: No summary available for samba-dbgsym in ubuntu disco.

No description available for samba-dbgsym in ubuntu disco.

samba-dev: No summary available for samba-dev in ubuntu disco.

No description available for samba-dev in ubuntu disco.

samba-dsdb-modules: No summary available for samba-dsdb-modules in ubuntu disco.

No description available for samba-dsdb-modules in ubuntu disco.

samba-dsdb-modules-dbgsym: No summary available for samba-dsdb-modules-dbgsym in ubuntu disco.

No description available for samba-dsdb-modules-dbgsym in ubuntu disco.

samba-libs: No summary available for samba-libs in ubuntu disco.

No description available for samba-libs in ubuntu disco.

samba-libs-dbgsym: No summary available for samba-libs-dbgsym in ubuntu disco.

No description available for samba-libs-dbgsym in ubuntu disco.

samba-testsuite: No summary available for samba-testsuite in ubuntu disco.

No description available for samba-testsuite in ubuntu disco.

samba-testsuite-dbgsym: No summary available for samba-testsuite-dbgsym in ubuntu disco.

No description available for samba-testsuite-dbgsym in ubuntu disco.

samba-vfs-modules: No summary available for samba-vfs-modules in ubuntu disco.

No description available for samba-vfs-modules in ubuntu disco.

samba-vfs-modules-dbgsym: No summary available for samba-vfs-modules-dbgsym in ubuntu disco.

No description available for samba-vfs-modules-dbgsym in ubuntu disco.

smbclient: No summary available for smbclient in ubuntu disco.

No description available for smbclient in ubuntu disco.

smbclient-dbgsym: No summary available for smbclient-dbgsym in ubuntu disco.

No description available for smbclient-dbgsym in ubuntu disco.

winbind: No summary available for winbind in ubuntu disco.

No description available for winbind in ubuntu disco.

winbind-dbgsym: No summary available for winbind-dbgsym in ubuntu disco.

No description available for winbind-dbgsym in ubuntu disco.