Ubuntu 17.04 USN-3296-1 Critical Samba Remote Code Execution Risk

ubuntu

May 24, 2017

Samba could be made to run programs as an administrator.

Summary

Samba could be made to run programs as an administrator.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

It was discovered that Samba incorrectly handled shared libraries. A remote

attacker could use this flaw to upload a shared library to a writable share

and execute arbitrary code.

Topics Covered

security advisory samba system update critical severity ubuntu remote execution risk

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  samba                           2:4.5.8+dfsg-0ubuntu0.17.04.2

Ubuntu 16.10:
  samba                           2:4.4.5+dfsg-2ubuntu5.6

Ubuntu 16.04 LTS:
  samba                           2:4.3.11+dfsg-0ubuntu0.16.04.7

Ubuntu 14.04 LTS:
  samba                           2:4.3.11+dfsg-0ubuntu0.14.04.8

In general, a standard system update will make all the necessary changes.