Ubuntu Security Notice 3939-2 - USN-3939-1 fixed a vulnerability in Samba. This update provides the corresponding update for Ubuntu 12.04 ESM. Michael Hanselmann discovered that Samba incorrectly handled registry files. A remote attacker could possibly use this issue to create new registry files outside of the share, contrary to expectations. Various other issues were also addressed.
423b0f2dd2d40485dec194a99014faf87bd1673d4acf74e2052f9b4ebe3e9fea
==========================================================================
Ubuntu Security Notice USN-3939-2
April 08, 2019
samba vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 ESM
Summary:
Samba could be made to create files in unexpected locations.
Software Description:
- samba: SMB/CIFS file, print, and login server for Unix
Details:
USN-3939-1 fixed a vulnerability in Samba. This update provides
the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
Michael Hanselmann discovered that Samba incorrectly handled registry
files. A remote attacker could possibly use this issue to create new
registry files outside of the share, contrary to expectations.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 ESM:
libsmbclient 2:3.6.25-0ubuntu0.12.04.17
samba 2:3.6.25-0ubuntu0.12.04.17
In general, a standard system update will make all the necessary
changes.
References:
https://usn.ubuntu.com/usn/usn-3939-2
https://usn.ubuntu.com/usn/usn-3939-1
CVE-2019-3880