Ubuntu 18.10: USN-3939-1 Moderate: Samba File Creation Issue

ubuntu

April 8, 2019

Samba could be made to create files in unexpected locations.

Summary

Samba could be made to create files in unexpected locations.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

Michael Hanselmann discovered that Samba incorrectly handled registry

files. A remote attacker could possibly use this issue to create new

registry files outside of the share, contrary to expectations.

Topics Covered

security advisory samba remote attack ubuntu file creation

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  libsmbclient                    2:4.8.4+dfsg-2ubuntu2.3
  samba                           2:4.8.4+dfsg-2ubuntu2.3

Ubuntu 18.04 LTS:
  libsmbclient                    2:4.7.6+dfsg~ubuntu-0ubuntu2.9
  samba                           2:4.7.6+dfsg~ubuntu-0ubuntu2.9

Ubuntu 16.04 LTS:
  libsmbclient                    2:4.3.11+dfsg-0ubuntu0.16.04.19
  samba                           2:4.3.11+dfsg-0ubuntu0.16.04.19

Ubuntu 14.04 LTS:
  libsmbclient                    2:4.3.11+dfsg-0ubuntu0.14.04.20
  samba                           2:4.3.11+dfsg-0ubuntu0.14.04.20

In general, a standard system update will make all the necessary changes.