From: Karolin Seeger Date: Mon, 12 Jan 2015 20:01:33 +0000 (+0100) Subject: WHATSNEW: Add release notes for Samba 4.0.24. X-Git-Tag: samba-4.0.24~1 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=65a088d2d418c4285de26a5636f0e7a38ae28ec9;p=thirdparty%2Fsamba.git WHATSNEW: Add release notes for Samba 4.0.24. Signed-off-by: Karolin Seeger --- diff --git a/WHATSNEW.txt b/WHATSNEW.txt index c74580b977f..777997f174c 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,3 +1,52 @@ + ============================== + Release Notes for Samba 4.0.24 + January 15, 2015 + ============================== + + +This is a security release in order to address CVE-2014-8143 (Elevation +of privilege to Active Directory Domain Controller). + +o CVE-2014-8143: + Samba's AD DC allows the administrator to delegate + creation of user or computer accounts to specific users or groups. + + However, all released versions of Samba's AD DC did not implement the + additional required check on the UF_SERVER_TRUST_ACCOUNT bit in the + userAccountControl attributes. + + +Changes since 4.0.23: +--------------------- + +o Andrew Bartlett + * BUG 10993: CVE-2014-8143: dsdb-samldb: Check for extended access + rights before we allow changes to userAccountControl. + + +###################################################################### +Reporting bugs & Development Discussion +####################################### + +Please discuss this release on the samba-technical mailing list or by +joining the #samba-technical IRC channel on irc.freenode.net. + +If you do report problems then please try to send high quality +feedback. If you don't provide vital information to help us track down +the problem then you will probably be ignored. All bug reports should +be filed under the Samba 4.0 product in the project's Bugzilla +database (https://bugzilla.samba.org/). + + +====================================================================== +== Our Code, Our Bugs, Our Responsibility. +== The Samba Team +====================================================================== + + +Release notes for older releases follow: +---------------------------------------- + ============================== Release Notes for Samba 4.0.23 December 08, 2014 @@ -89,8 +138,8 @@ database (https://bugzilla.samba.org/). ====================================================================== -Release notes for older releases follow: ----------------------------------------- +---------------------------------------------------------------------- + ============================== Release Notes for Samba 4.0.22