Skip to content
OpenAdvisories
Unscored USN-3242-2 0 CVEs

samba regression

Published Mar 30, 2017 · Updated Apr 22, 2026

Summary

USN-3242-1 fixed a vulnerability in Samba. The upstream fix introduced a
regression when Samba is configured to disable following symbolic links.

This update fixes the problem.

Original advisory details:

Jann Horn discovered that Samba incorrectly handled symlinks. An
authenticated remote attacker could use this issue to access files on the
server outside of the exported directories.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS samba 2:4.3.11+dfsg-0ubuntu0.14.04.7
Ubuntu · 16.04 LTS 16.04:LTS samba 2:4.3.11+dfsg-0ubuntu0.16.04.6

References

  • report
    https://launchpad.net/bugs/1675698