Topic: Samba 2.2.8 for SME due to security fix?

[Drew]

Has everyone seen this Samba security fix update to version 2.2.8?

http://us3.samba.org/samba/whatsnew/samba-2.2.8.html

Has there been a version released for SME?

[Andrew Hodgson]

Hi,

There is a howto on upgradeing to an older version of Samba already available - I am not sure whether it will work on 5.6/newer versions of Samba.

The problem imho does need fixing though as people may be affected if they are running as a gateway and/or the firewall behind the server allows SMB specific ports through.

[Charlie Brady]

Andrew Hodgson wrote:

> The problem imho does need fixing though as people may be
> affected if they are running as a gateway and/or the firewall
> behind the server allows SMB specific ports through.

SME/e-smith servers running in gateway mode will not be vulnerable to any attack against this vulnerability from Internet addresses. All non-public services (including samba) are protected by packet firewalling, and are also configured to deny any service requests from other than the local network.

Regards

Charlie

[Andrew Hodgson]

Charlie,

Thanks and sorry for the misinformation.

Andrew.