history/samba-4.10.5.html

   1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
   2  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
   3 <html xmlns="http://www.w3.org/1999/xhtml">
   4 <head>
   5 <title>Samba 4.10.5 - Release Notes</title>
   6 </head>
   7 <body>
   8 <H2>Samba 4.10.5 Available for Download</H2>
   9 <p>
  10 <a href="https://download.samba.org/pub/samba/stable/samba-4.10.5.tar.gz">Samba 4.10.5 (gzipped)</a><br>
  11 <a href="https://download.samba.org/pub/samba/stable/samba-4.10.5.tar.asc">Signature</a>
  12 </p>
  13 <p>
  14 <a href="https://download.samba.org/pub/samba/patches/samba-4.10.4-4.10.5.diffs.gz">Patch (gzipped) against Samba 4.10.4</a><br>
  15 <a href="https://download.samba.org/pub/samba/patches/samba-4.10.4-4.10.5.diffs.asc">Signature</a>
  16 </p>
  17 <p>
  18 <pre>
  19                    ==============================
  20                    Release Notes for Samba 4.10.5
  21                            June 19, 2019
  22                    ==============================
  23
  24
  25 This is a security release in order to address the following defects:
  26
  27 o  CVE-2019-12435 (Samba AD DC Denial of Service in DNS management server
  28                   (dnsserver))
  29 o  CVE-2019-12436 (Samba AD DC LDAP server crash (paged searches))
  30
  31 =======
  32 Details
  33 =======
  34
  35 o  CVE-2019-12435:
  36    An authenticated user can crash the Samba AD DC&apos;s RPC server process via a
  37    NULL pointer dereference.
  38
  39 o  CVE-2019-12436:
  40     An user with read access to the directory can cause a NULL pointer
  41     dereference using the paged search control.
  42
  43 For more details and workarounds, please refer to the security advisories.
  44
  45
  46 Changes since 4.10.4:
  47 ---------------------
  48
  49 o  Douglas Bagnall &lt;douglas.bagnall@catalyst.net.nz&gt;
  50    * BUG 13922: CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found
  51      in DnssrvOperation2.
  52    * BUG 13951: CVE-2019-12436 dsdb/paged_results: Ignore successful results
  53      without messages.
  54
  55
  56 </pre>
  57 </p>
  58 </body>
  59 </html>