Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 16.04: USN-2950-5 Moderate Samba Regression Issue Fix

ubuntu
Calendar Grey May 25, 2016
Scroller Ubuntu
USN-4061-1 tackles critical Apache flaws affecting various Ubuntu distributions. Upgrade for improved protection.
USN-2950-1 introduced a regression in Samba.

Summary

USN-2950-1 introduced a regression in Samba.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

USN-2950-1 fixed vulnerabilities in Samba. USN-2950-3 updated Samba to

version 4.3.9, which introduced a regression when using the ntlm_auth tool.

This update fixes the problem.

Original advisory details:

Jouni Knuutinen discovered that Samba contained multiple flaws in the

DCE/RPC implementation. A remote attacker could use this issue to perform

a denial of service, downgrade secure connections by performing a man in

the middle attack, or possibly execute arbitrary code. (CVE-2015-5370)

Stefan Metzmacher discovered that Samba contained multiple flaws in the

NTLMSSP authentication implementation. A remote attacker could use this

issue to downgrade connections to plain text by performing a man in the

middle attack. (CVE-2016-2110)

Alberto Solino discovered that a Samba domain controller would establish a

secure c...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu Samba remote authentication regression issues

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  samba                           2:4.3.9+dfsg-0ubuntu0.16.04.2

Ubuntu 15.10:
  samba                           2:4.3.9+dfsg-0ubuntu0.15.10.2

Ubuntu 14.04 LTS:
  samba                           2:4.3.9+dfsg-0ubuntu0.14.04.3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2950-5

https://ubuntu.com/security/notices/USN-2950-1

https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1578576

Severity
important
Lowest
Low
Medium
High
Critical

May 25, 2016

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu Samba remote authentication regression issues

Package Information

https://launchpad.net/ubuntu/+source/samba/2:4.3.9+dfsg-0ubuntu0.16.04.2
https://launchpad.net/ubuntu/+source/samba/2:4.3.9+dfsg-0ubuntu0.15.10.2
https://launchpad.net/ubuntu/+source/samba/2:4.3.9+dfsg-0ubuntu0.14.04.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.