[ Date Index ]
[ Thread Index ]
[ <= Previous by date /
thread ]
[ Next by date /
thread => ]
Re: [LUG] Fw: [SECURITY] [DSA 5015-1] samba security update
- To: list@xxxxxxxxxxxxx
- Subject: Re: [LUG] Fw: [SECURITY] [DSA 5015-1] samba security update
- From: Sebastian <seabass@xxxxxx>
- Date: Wed, 1 Dec 2021 14:47:18 +0000
- Content-disposition: inline
- Delivered-to: dclug@xxxxxxxxxxxxxxxxxxxxx
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=dcglug.org.uk; s=1633856761; h=Sender:Content-Transfer-Encoding: Content-Type:Reply-To:List-Subscribe:List-Help:List-Post:List-Unsubscribe: List-Id:Subject:In-Reply-To:MIME-Version:References:Message-ID:To:From:Date: Cc:Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Owner:List-Archive; bh=bR+f7JDvAQ1mC8eJ4OqMqDuqPaGSeqdVto6VP5Vi7rY=; b=0a/I6i2xbQ+fZR875dUH/UDkw9 ZGEk/K3z4uikniwkNIFFk5TBymVs+eJVmN8l9wiqgAbPo28LMCPGfO8J+yXQHz7+RwaZho1ADjRDp vEYY2TFuIMA5qHdJITK5pJwZ/umi4xhej12NKN/T3Vdu22e10CUbe8hfXpL7eaJN/pQ8=;
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1638370041; bh=ON4FztYnhbAoNUXOUauwt9pgQwFZ/u3ia7+z0e7tNEE=; h=X-UI-Sender-Class:Date:From:To:Subject:References:In-Reply-To; b=KFMG0ehphEGdhg2PStttK7Pr6zisHfi7WukG8MyE3sWW/hJbRbx8Wkwn1C+Tms62Y MieKp9aRflSn5JrOrZz2/3KbTCA6P+QRWZOjr1ZboxvA+it6H3EyEKTf0Uwzf/o+Th Nrg5EJMaoxMDRmvKAJjGRgfmEH8d5P9sYzGAC6IE=
Dear Fraser,
> Don't do nothing about it, but do something about it one way or >
> another... Begin forwarded message:
>
> Package : samba
> CVE ID : CVE-2020-25717
>
> Andrew Bartlett discovered that Samba, a SMB/CIFS file, print, and login
> server for Unix, may map domain users to local users in an undesired
> way. This could allow a user in an AD domain to potentially become root
Looks like this has been fixed since Debian 10 'Oldstable' Buster, so
I shouldn't imagine anyone on this mailing list is affected :)
Best wishes,
Sebastian
--
The Mailing List for the Devon & Cornwall LUG
https://mailman.dcglug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq
