Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 20.04: USN-6425-2 Critical: Samba Regression Issues

ubuntu
Calendar Grey October 11, 2023
Dist Ubuntu Esm H88
USN-6529-1 deals with a MySQL issue impacting Ubuntu 22.04, featuring vital patches for multiple vulnerabilities.
USN-6425-1 introduced a regression in Samba.

Summary

USN-6425-1 introduced a regression in Samba.

Software Description:

- samba: SMB/CIFS file, print, and login server for Unix

Details:

USN-6425-1 fixed vulnerabilities in Samba. Due to a build issue on Ubuntu

20.04 LTS, the update introduced regressions in macro handling and

possibly other functionality.

This update fixes the problem. We apologize for the inconvenience.

Original advisory details:

Sri Nagasubramanian discovered that the Samba acl_xattr VFS module

incorrectly handled read-only files. When Samba is configured to ignore

system ACLs, a remote attacker could possibly use this issue to truncate

read-only files. (CVE-2023-4091)

Andrew Bartlett discovered that Samba incorrectly handled the DirSync

control. A remote attacker with an RODC DC account could possibly use this

issue to obtain all domain secrets. (CVE-2023-4154)

Andrew Bartlett discovered that Samba incorrectly handled the rpcecho

development server. A remote attacke...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service samba critical fix update instructions ubuntu regression

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
   samba                           2:4.15.13+dfsg-0ubuntu0.20.04.7

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6425-1

https://bugs.launchpad.net/ubuntu/+source/samba/+bug/2039031

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6425-2

Topics%20covered

Topics Covered

security advisory denial of service samba critical fix update instructions ubuntu regression

Package Information

https://launchpad.net/ubuntu/+source/samba/2:4.15.13+dfsg-0ubuntu0.20.04.7

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here