=========================================================================Ubuntu Security Notice USN-3939-2
April 08, 2019
samba vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 ESM
Summary:
Samba could be made to create files in unexpected locations.
Software Description:
- samba: SMB/CIFS file, print, and login server for Unix
Details:
USN-3939-1 fixed a vulnerability in Samba. This update provides
the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
Michael Hanselmann discovered that Samba incorrectly handled registry
files. A remote attacker could possibly use this issue to create new
registry files outside of the share, contrary to expectations.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 ESM:
libsmbclient 2:3.6.25-0ubuntu0.12.04.17
samba 2:3.6.25-0ubuntu0.12.04.17
In general, a standard system update will make all the necessary
changes.
References:
https://ubuntu.com/security/notices/USN-3939-2
https://ubuntu.com/security/notices/USN-3939-1
CVE-2019-3880