diff options
| author | Karolin Seeger <kseeger@samba.org> | 2015-01-12 21:41:32 +0100 |
|---|---|---|
| committer | Karolin Seeger <kseeger@samba.org> | 2015-01-12 21:41:32 +0100 |
| commit | 801055358de0988717b65b4f6a2a6a4b820b9fcd (patch) | |
| tree | 213735dd0db4e0c8a4718448270cbb964fe97bfe /WHATSNEW.txt | |
| parent | 5cc1c0ec403358d08e208a38feae11631510ab72 (diff) | |
| download | samba-801055358de0988717b65b4f6a2a6a4b820b9fcd.tar.gz | |
WHATSNEW: Add release notes for Samba 4.1.16.
Signed-off-by: Karolin Seeger <kseeger@samba.org>
Diffstat (limited to 'WHATSNEW.txt')
| -rw-r--r-- | WHATSNEW.txt | 55 |
1 files changed, 52 insertions, 3 deletions
diff --git a/WHATSNEW.txt b/WHATSNEW.txt index fe8cbebb1ac..81a1d56ed0f 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,4 +1,55 @@ ============================== + Release Notes for Samba 4.1.16 + January 15, 2015 + ============================== + + +This is a security release in order to address CVE-2014-8143 (Elevation +of privilege to Active Directory Domain Controller). + +o CVE-2014-8143: + Samba's AD DC allows the administrator to delegate + creation of user or computer accounts to specific users or groups. + + However, all released versions of Samba's AD DC did not implement the + additional required check on the UF_SERVER_TRUST_ACCOUNT bit in the + userAccountControl attributes. + + +Changes since 4.1.15: +--------------------- + +o Andrew Bartlett <abartlet@samba.org> + * BUG 10993: CVE-2014-8143: dsdb-samldb: Check for extended access + rights before we allow changes to userAccountControl. + + +####################################### +Reporting bugs & Development Discussion +####################################### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 4.1 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +====================================================================== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +====================================================================== + + +Release notes for older releases follow: +---------------------------------------- + +====================================================================== + + ============================== Release Notes for Samba 4.1.15 January 12, 2015 ============================== @@ -78,10 +129,8 @@ database (https://bugzilla.samba.org/). ====================================================================== -Release notes for older releases follow: ----------------------------------------- +---------------------------------------------------------------------- -====================================================================== ============================== Release Notes for Samba 4.1.14 |