If a release >= 4.2 is not provided yet, would it be possible to apply at least the workaround in smb.conf :
"On Samba versions 4.0.0 and above, add the line: rpc_server:netlogon=disabled to the [global] section of your smb.conf." or warn the user when he upgrades? 2015-03-19 16:56 GMT+01:00 Colin Close <[email protected]>: > Tomek, > Ok I'll bring 2014.1 up to the current cooker version and then try the latest > ver for cooker. > Best > Colin > On Thursday 19 Mar 2015 15:54:08 Tomasz Gajc wrote: >> Would be nice to update cooker to lastest samba 4.2 >> >> 2015-03-19 15:32 GMT+01:00 Colin Close <[email protected]>: >> >> > On Thursday 19 Mar 2015 13:07:12 Jean-Claude Vanier wrote: >> > > Up. >> > > "All versions of Samba from 3.5.0 to 4.2.0rc4 are vulnerable to an >> > > unexpected code execution vulnerability in the smbd file server >> > > daemon. >> > > >> > > A malicious client could send packets that may set up the stack in >> > > such a way that the freeing of memory in a subsequent anonymous >> > > netlogon packet could allow execution of arbitrary code. This code >> > > would execute with root privileges." >> > > >> > > https://www.samba.org/samba/security/CVE-2015-0240 >> > > >> > > 2015-02-25 12:13 GMT+01:00 Blackcrack <[email protected]>: >> > Hi, >> > 2014.1 samba updated to 4.1.17 building now. Cooker is as 4.1.17 >> > Best, >> > Colin >> > >> > Colin Close >> > QA Team >> > >> > >> > > > Hy, >> > > > >> > > > we have an Security issue in Samba >> > > > >> > > > https://securityblog.redhat.com/tag/smbd/ >> > > > >> > > > https://securityblog.redhat.com/feed/ >> > > > http://planet.fedoraproject.org/security/ >> > > > >> > > > https://www.samba.org/samba/history/security.html >> > > > >> > > > >> > https://git.samba.org/?p=samba.git;a=patch;h=8eb981c90a6094b15d4b71cc14fee4f23c713cf8 >> > > > >> > > > please update 2014&2014 >> > > > because 2014 should be save also.. >> > > > >> > > > best regards >> > > > Blacky >> > > > >> > > > _______________________________________________ >> > > > OM-Cooker mailing list >> > > > [email protected] >> > > > http://ml.openmandriva.org/listinfo.cgi/om-cooker-openmandriva.org >> > > _______________________________________________ >> > > OM-Cooker mailing list >> > > [email protected] >> > > http://ml.openmandriva.org/listinfo.cgi/om-cooker-openmandriva.org >> > >> > _______________________________________________ >> > OM-Cooker mailing list >> > [email protected] >> > http://ml.openmandriva.org/listinfo.cgi/om-cooker-openmandriva.org >> > > > _______________________________________________ > OM-Cooker mailing list > [email protected] > http://ml.openmandriva.org/listinfo.cgi/om-cooker-openmandriva.org _______________________________________________ OM-Cooker mailing list [email protected] http://ml.openmandriva.org/listinfo.cgi/om-cooker-openmandriva.org
