Ubuntu 16.10 USN-3242-1 Moderate: Samba Info Exposure Risk

ubuntu

March 23, 2017

Samba could be made to expose sensitive information over the network.

Summary

Samba could be made to expose sensitive information over the network.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

Jann Horn discovered that Samba incorrectly handled symlinks. An

authenticated remote attacker could use this issue to access files on the

server outside of the exported directories.

Topics Covered

security advisory moderate samba information exposure ubuntu network threat

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  samba                           2:4.4.5+dfsg-2ubuntu5.4

Ubuntu 16.04 LTS:
  samba                           2:4.3.11+dfsg-0ubuntu0.16.04.5

Ubuntu 14.04 LTS:
  samba                           2:4.3.11+dfsg-0ubuntu0.14.04.6

Ubuntu 12.04 LTS:
  samba                           2:3.6.25-0ubuntu0.12.04.9

In general, a standard system update will make all the necessary changes.