Skip to content

Commit

Permalink
WHATSNEW: Add release notes for Samba 4.5.15.
Browse files Browse the repository at this point in the history
Signed-off-by: Karolin Seeger <[email protected]>
  • Loading branch information
kseeger committed Nov 17, 2017
1 parent c1a22e5 commit d7526d6
Showing 1 changed file with 58 additions and 2 deletions.
60 changes: 58 additions & 2 deletions WHATSNEW.txt
Original file line number Diff line number Diff line change
@@ -1,3 +1,59 @@
==============================
Release Notes for Samba 4.5.15
November 21, 2017
==============================


This is a security release in order to address the following defect:

o CVE-2017-14746 (Use-after-free vulnerability.)


=======
Details
=======

o CVE-2017-14746:
All versions of Samba from 4.0.0 onwards are vulnerable to a use after
free vulnerability, where a malicious SMB1 request can be used to
control the contents of heap memory via a deallocated heap pointer. It
is possible this may be used to compromise the SMB server.

For more details and a workaround, please see the security advisories:

o https://www.samba.org/samba/security/CVE-2017-14746.html


Changes since 4.5.14:
---------------------

o Jeremy Allison <[email protected]>
* BUG 13041: CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug.


#######################################
Reporting bugs & Development Discussion
#######################################

Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.

If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored. All bug reports should
be filed under the "Samba 4.1 and newer" product in the project's Bugzilla
database (https://bugzilla.samba.org/).


======================================================================
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
======================================================================


Release notes for older releases follow:
----------------------------------------

==============================
Release Notes for Samba 4.5.14
September 20, 2017
Expand Down Expand Up @@ -69,8 +125,8 @@ database (https://bugzilla.samba.org/).
======================================================================


Release notes for older releases follow:
----------------------------------------
----------------------------------------------------------------------


==============================
Release Notes for Samba 4.5.13
Expand Down

0 comments on commit d7526d6

Please sign in to comment.