HomeFreeBSD

net/samba413: Update to the 4.13.16 release to address CVE-2021-43566

Description

net/samba413: Update to the 4.13.16 release to address CVE-2021-43566

In addition an CVE-2021-20316 is issued, but can't be address in this
Samba release.

Workaround and mitigating factors for CVE-2021-20316

Do not enable SMB1 (please note SMB1 is disabled by default in Samba
from version 4.11.0 and onwards). This prevents the creation of
symbolic links via SMB1. If SMB1 must be enabled for backwards
compatibility then add the parameter:

unix extensions = no

to the [global] section of your smb.conf and restart smbd. This
prevents SMB1 clients from creating symlinks on the exported file
system.

However, if the same region of the file system is also exported using
NFS, NFS clients can create symlinks that potentially can also hit the
race condition. For non-patched versions of Samba we recommend only
exporting areas of the file system by either SMB2 or NFS, not both.

Security: CVE-2021-43566

Details

Provenance
timurAuthored on Jan 12 2022, 5:22 AM
Parents
R11:16e4ec666fff: lang/yabasic: Update to 2.90.2
Branches
Unknown
Tags
Unknown