Samba vulnerability

I think this apply to TurrisOS too:
https://www.samba.org/samba/security/CVE-2021-44142.html
Current TurrisOS is using Samba 4.11.17 and my smb.conf has the ‘fruit’ module active.

Not sure if Samba can be updated to a newer release, but at least there is a workaround.

Hello @Leonardo,

Package samba4 is maintained in the community packages repository, and that’s why I ask if the maintainer has any plans to backport fixes for those CVEs, and it seems that we will take a look to update it to major version e.g. 4.13, which is using Ubuntu as well.

I can not do any promises that it will be included in 5.3.5, but who knows. :wink:

1 Like

will have to bump the major samba version

I don’t expect that can be done that fast.

1 Like

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.