ALT-PU-2015-2891-3

Package update samba in branch sisyphus

Version4.2.3-alt1

Published2026-09-25

Max severityCRITICAL

Severity:

Closed issues (5)

CRITICAL10.0

Уязвимость подсистемы печати (printing subsystem) программ сетевого взаимодействия Samba, позволяющая нарушителю выполнить произвольный код

Published: 2026-05-26Modified: 2026-10-07

CVSS 3.xCRITICAL 10.0

CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVSS 2.0CRITICAL 10.0

CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C

References

HIGH7.1

Уязвимость механизма NTFS reparse points программного обеспечения Samba, позволяющая нарушителю изменить произвольные файлы

Published: 2026-05-27Modified: 2026-05-28

CVSS 3.xHIGH 7.1

CVSS:3.x/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

CVSS 2.0HIGH 7.5

CVSS:2.0/AV:N/AC:L/Au:S/C:N/I:P/A:C

References

MEDIUM6.5

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.

Published: 2026-05-27Modified: 2026-10-08

CVSS 3.xMEDIUM 6.5

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References

CRITICAL9.0

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.

Published: 2026-05-26Modified: 2026-09-01

CVSS 3.xCRITICAL 9.0

CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

References

MEDIUM6.5

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Published: 2026-08-14Modified: 2026-09-23

CVSS 3.xMEDIUM 6.5

CVSS:3.x/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References