Bug 40847

Summary:	Samba: security update (4.1)
Product:	UCS	Reporter:	Arvid Requate <requate>
Component:	Security updates	Assignee:	Arvid Requate <requate>
Status:	CLOSED FIXED	QA Contact:	Janek Walkenhorst <walkenhorst>
Severity:	normal
Priority:	P4	CC:	botner
Version:	UCS 4.1	Flags:	requate: Patch_Available+
Target Milestone:	UCS 4.1-1-errata
Hardware:	Other
OS:	Linux
URL:	https://bugzilla.samba.org/show_bug.cgi?id=11648
What kind of report is it?:	Security Issue	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):	Security
Max CVSS v3 score:
Bug Depends on:	40328
Bug Blocks:

Description Arvid Requate

2016-03-07 12:23:23 CET

There will be a security update on the 8th of March, currently embargoed:

* Getting and setting Windows ACLs on symlinks can change permissions on link target (CVE-2015-7560)

Comment 1 Arvid Requate

2016-03-07 13:30:09 CET

The package is rebuilt with the upstream patch in errata4.1-1.

Advisory: samba.yaml

Comment 2 Felix Botner

2016-03-08 14:48:58 CET

OK - built with patches
OK - installation
OK - Autotest MultiEnv
OK - simple samba test (windows join, share access)

OK - YAML

Comment 3 Janek Walkenhorst

2016-03-08 15:31:31 CET

(In reply to Felix Botner from comment #2)
> OK - built with patches
> OK - installation
> OK - Autotest MultiEnv
> OK - simple samba test (windows join, share access)
> 
> OK - YAML
I concur.

Comment 4 Janek Walkenhorst

2016-03-08 17:06:07 CET

<http://errata.software-univention.de/ucs/4.1/124.html>