SOLVED SAMBA fix for CVE-2017-7494

[marian78]

Hi,
i want ask, if is samba security bug CVE-2017-7494 ( https://www.samba.org/samba/security/CVE-2017-7494.html ) present on Freenas v9.10 STABLE.

 

[Ericloewe]

It's in 9.10.2-U4.

 

[anodos]

Hi,
i want ask, if is samba security bug CVE-2017-7494 ( https://www.samba.org/samba/security/CVE-2017-7494.html ) present on Freenas v9.10 STABLE.

It's in the works: https://bugs.freenas.org/issues/24162
My best guess as an outsider is that U4 will come out today.

Yesterday I wrote a post about mitigation steps here: https://forums.freenas.org/index.ph...-code-execution-vulnerability-in-samba.54791/

 

[marian78]

thx for info.

 

[Ericloewe]

It's in the works: https://bugs.freenas.org/issues/24162
My best guess as an outsider is that U4 will come out today.

Yesterday I wrote a post about mitigation steps here: https://forums.freenas.org/index.ph...-code-execution-vulnerability-in-samba.54791/

That's the ticket for FreeNAS 11. The 9.10.2-U4 ticket seems to be private.

 

[BloodyIron]

Reading this away from access to servers. What's the timeframe for U4? Is it available to 9.10.2-Stable?

 

[Ericloewe]

What's the timeframe for U4?

Today, tomorrow, something like that.

Is it available to 9.10.2-Stable?

Since it's 9.10.2-U4, I'll go out on a limb and say "yes".

 

[BloodyIron]

Pretty sure I was presented with the U4 update like 20 mins ago or more. Just updated and the system tab reports 9.10.2-U4. I suspect this means the CVE fix is included too? :^)

 

[Ericloewe]

Yeah, it's probably the only change. The changelog will have details.

 

[Jailer]

Yeah, it's probably the only change. The changelog will have details.

It is.

#24116 Bug Expected Update Samba to 4.5.9

http://update.ixsystems.com/FreeNAS/FreeNAS-9.10-STABLE/Notes/ChangeLog-2BoyAf.txt

 

[Ericloewe]

Yup, just finished updating. Had to manually reset the X11SSM-F because it gets stuck on some stupid ME initialization every time it's reset by ACPI. I hope they fixed this in the new BIOS versions, because I'm sick of having to open IPMI just to update the server.

 

[BloodyIron]

The changelog 404'd for me. \o/

Oh, looks like it's online, I clicked too fast?

Yeah, it's probably the only change. The changelog will have details.

 

[BloodyIron]

Thanks peeps!

 

[Pheran]

I'm confused by the change log. It says, "Update Samba to 4.5.9", but the Samba security announcement says that the fix is in 4.5.10?

 

[Martin Pouliot]

I'm confused by the change log. It says, "Update Samba to 4.5.9", but the Samba security announcement says that the fix is in 4.5.10?

Pheran, I have just installed the update. It's probably a typo since the output of smbd -V is 4.5.10

 

[anodos]

Pheran, I have just installed the update. It's probably a typo since the output of smbd -V is 4.5.10

Yeah, it's a typo. It looks like originally FreeNAS was going to updated to 4.5.9 before the bug came out necessitating 4.5.10.