ALT-PU-2015-2891-5

Обновление пакета samba в ветке sisyphus

Версия4.2.3-alt1

Задание#146384

Опубликовано2026-10-14

Макс. серьёзностьCRITICAL

Серьёзность:

Закрытые проблемы (5)

CRITICAL10.0

Уязвимость подсистемы печати (printing subsystem) программ сетевого взаимодействия Samba, позволяющая нарушителю выполнить произвольный код

Опубликовано: 2026-05-26Изменено: 2026-10-07

CVSS 3.xКРИТИЧЕСКАЯ 10.0

CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVSS 2.0КРИТИЧЕСКАЯ 10.0

CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C

Ссылки

HIGH7.1

Уязвимость механизма NTFS reparse points программного обеспечения Samba, позволяющая нарушителю изменить произвольные файлы

Опубликовано: 2026-05-27Изменено: 2026-05-28

CVSS 3.xВЫСОКАЯ 7.1

CVSS:3.x/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

CVSS 2.0ВЫСОКАЯ 7.5

CVSS:2.0/AV:N/AC:L/Au:S/C:N/I:P/A:C

Ссылки

MEDIUM6.5

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.

Опубликовано: 2026-05-27Изменено: 2026-10-08

CVSS 3.xСРЕДНЯЯ 6.5

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Ссылки

CRITICAL9.0

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.

Опубликовано: 2026-05-26Изменено: 2026-09-01

CVSS 3.xКРИТИЧЕСКАЯ 9.0

CVSS:3.x/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Ссылки

MEDIUM6.5

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Опубликовано: 2026-08-14Изменено: 2026-09-23

CVSS 3.xСРЕДНЯЯ 6.5

CVSS:3.x/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Ссылки