[Buildroot] [PATCH] package/samba4: security bump to version 4.9.6

Peter Korsgaard peter at korsgaard.com
Sun Apr 14 21:29:19 UTC 2019


>>>>> "Peter" == Peter Korsgaard <peter at korsgaard.com> writes:

 > Fixes the following security vulnerabilities:
 >  - CVE-2019-3870:
 >    During the provision of a new Active Directory DC, some files in the private/
 >    directory are created world-writable.
 >    https://www.samba.org/samba/security/CVE-2019-3870.html

 >  - CVE-2019-3880:
 >    Authenticated users with write permission can trigger a symlink traversal to
 >    write or detect files outside the Samba share.
 >    https://www.samba.org/samba/security/CVE-2019-3880.html

 > For more details, see the release notes:
 > https://www.samba.org/samba/history/samba-4.9.6.html

 > Signed-off-by: Peter Korsgaard <peter at korsgaard.com>

Committed to 2019.02.x, thanks.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list