ื‘ืึทืงืขื ืขื  ืžืขืœื“ื•ื ื’ ืกืึทืžื‘ืึท 4.13.0, ืฐืขืœื›ืข ืจ ื”ื ื˜ ืคืืจื–ืขืฆ ื˜ ื“ ื™ ืื ื˜ืฐื™ืงืœื•ื  ื’ ืคื• ืŸ ื“ืข ืจ ืฆืฐืฒื’ ืกืึทืžื‘ืึท 4 ืžื™ื˜ ืึท ืคื•ืœ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ืึท ืคืขืœื“ ืงืึทื ื˜ืจืึธื•ืœืขืจ ืื•ืŸ ืึทืงื˜ื™ื•ื•ืข Directory ื“ื™ื ืกื˜, ืงืึทืžืคึผืึทื˜ืึทื‘ืึทืœ ืžื™ื˜ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ Windows 2000 ืื•ืŸ ื˜ื•ื™ื’ืขื•ื•ื“ื™ืง ืฆื• ื“ื™ื ืขืŸ ืึทืœืข ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ Windows ืงืœื™ื™ืึทื ืฅ ื’ืขืฉื˜ื™ืฆื˜ ื“ื•ืจืš ืžื™ื™ืงืจืึธืกืึธืคึฟื˜, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ Windows 10. Samba 4 ืื™ื– ืึท ืžื•ืœื˜ื™ืคื•ื ืงื˜ื™ืึธื ืึทืœ ืกืขืจื•ื•ืขืจ ืคึผืจืึธื“ื•ืงื˜ ื•ื•ืึธืก ืื•ื™ืš ื’ื™ื˜ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ืึท ื˜ืขืงืข ืกืขืจื•ื•ืขืจ, ื“ืจื•ืง ื“ื™ื ืกื˜ ืื•ืŸ ืื™ื“ืขื ื˜ื™ื˜ืขื˜ ืกืขืจื•ื•ืขืจ (ื•ื•ื™ื ื‘ื™ื™ื ื“).

ืฉืœื™ืกืœ ืขื ื“ืขืจื•ื ื’ืขืŸ ืื™ืŸ Samba 4.13:

  • ืฆื•ื’ืขื’ืขื‘ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืฉื•ืฅ ื–ืขืจืึธืœืึธื’ืึธืŸ (CVE-2020-1472) ืึทืœืึทื•ื– ืึทืŸ ืึทื˜ืึทืงืขืจ ืฆื• ื‘ืึทืงื•ืžืขืŸ ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ื™ื•ื•ืข ืจืขื›ื˜ ืื•ื™ืฃ ืึท ืคืขืœื“ ืงืึทื ื˜ืจืึธื•ืœืขืจ ืื•ื™ืฃ ืกื™ืกื˜ืขืžืขืŸ ื•ื•ืึธืก ื˜ืึธืŸ ื ื™ื˜ ื ื•ืฆืŸ ื“ื™ "ืกืขืจื•ื•ืขืจ ืกื˜ืฉืึทื ื ืขืœ = ื™ืึธ" ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ.
  • ื“ื™ ืžื™ื ื™ืžื•ื ืคึผื™ื˜ื”ืึธืŸ ื•ื•ืขืจืกื™ืข ืคืึธื“ืขืจื•ื ื’ ืื™ื– ื’ืขื•ื•ืืงืกืŸ ืคื•ืŸ Python 3.5 ืฆื• Python 3.6. ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื‘ื•ื™ืขืŸ ืึท ื˜ืขืงืข ืกืขืจื•ื•ืขืจ ืžื™ื˜ Python 2 ืื™ื– ืจื™ื˜ื™ื™ื ื“ ืคึฟืึทืจ ืื™ืฆื˜ (ืื™ื™ื“ืขืจ ืคืœื™ืกื ื“ื™ืง ./configure' ืื•ืŸ 'ืžืึทื›ืŸ' ืื™ืจ ื–ืึธืœ ืฉื˜ืขืœืŸ ื“ื™ ืกื•ื•ื™ื•ื•ืข ื‘ื™ื™ึทื˜ืขื•ื•ื“ื™ืง 'PYTHON=python2'), ืึธื‘ืขืจ ืื™ืŸ ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ืฆื•ื•ื™ื™ึทื’ ืขืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ ืื•ืŸ Python. 3.6 ื•ื•ืขื˜ ื–ื™ื™ืŸ ืคืืจืœืื ื’ื˜ ืคึฟืึทืจ ื“ื™ ื‘ื•ื™ืขืŸ.
  • ื“ื™ "ื‘ืจื™ื™ื˜ ืœื™ื ืงืก = ื™ืึธ" ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™, ื•ื•ืึธืก ืึทืœืึทื•ื– ื˜ืขืงืข ืกืขืจื•ื•ืขืจ ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจืก ืฆื• ืฉืึทืคึฟืŸ ืกื™ืžื‘ืึธืœื™ืฉ ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ืขืŸ ืฆื• ืึท ื’ืขื’ื ื˜ ืึทืจื•ื™ืก ื“ื™ ืงืจืึทื ื˜ SMB / CIFS ืฆืขื˜ื™ื™ืœื•ื ื’, ืื™ื– ืืจื™ื‘ืขืจื’ืขืคืืจืŸ ืคื•ืŸ smbd ืฆื• ืึท ื‘ืึทื–ื•ื ื“ืขืจ "vfs_widelinks" ืžืึธื“ื•ืœืข. ื“ืขืจื•ื•ื™ื™ึทืœ, ื“ืขื ืžืึธื“ื•ืœืข ืื™ื– ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ืœืึธื•ื“ื™ื“ ืื•ื™ื‘ ื“ื™ "ื‘ืจื™ื™ื˜ ืœื™ื ืงืก = ื™ืึธ" ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ื– ืคืึธืจืฉื˜ืขืœืŸ ืื™ืŸ ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก. ืื™ืŸ ื“ืขืจ ืฆื•ืงื•ื ืคึฟื˜, ืขืก ืื™ื– ืคึผืœืึทื ื ืขื“ ืฆื• ื‘ืึทื–ื™ื™ึทื˜ื™ืงืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ "ื‘ืจื™ื™ื˜ ืœื™ื ืงืก = ื™ืึธ" ืจืขื›ื˜ ืฆื• ื–ื™ื›ืขืจื”ื™ื™ื˜ ื™ืฉื•ื–, ืื•ืŸ ืกืึทืžื‘ืึท ื™ื•ื–ืขืจื– ื–ืขื ืขืŸ ืฉื˜ืืจืง ื™ื ืงืขืจืึทื“ื–ืฉื“ ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ืคื•ืŸ "ื‘ืจื™ื™ื˜ ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ืขืŸ = ื™ืึธ" ืฆื• ื ื•ืฆืŸ "mount --bind" ืฆื• ืึธื ืงืœืึทืคึผืŸ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ื˜ื™ื™ืœืŸ ืคื•ืŸ ื“ื™ ื˜ืขืงืข ืกื™ืกื˜ืขื.
  • ืงืœืึทืกื™ืง ืžืึธื“ืข ืคืขืœื“ ืงืึทื ื˜ืจืึธื•ืœืขืจ ืฉื˜ื™ืฆืŸ ืื™ื– ื“ื™ืคึผืจื™ืฉื™ื™ื™ื˜ื™ื“. ื™ื•ื–ืขืจื– ืคื•ืŸ NT4-ื•ื•ื™ ืคืขืœื“ ืงืึทื ื˜ืจืึธื•ืœืขืจื– ('ืงืœืึทืกื™ืฉ') ื–ืึธืœ ื‘ืึทืฉื˜ื™ืžืขืŸ ืฆื• ื ื™ืฆืŸ Samba Active Directory ืคืขืœื“ ืงืึทื ื˜ืจืึธื•ืœืขืจื– ืฆื• ืงืขื ืขืŸ ืฆื• ืึทืจื‘ืขื˜ืŸ ืžื™ื˜ ืžืึธื“ืขืจืŸ Windows ืงืœื™ื™ืึทื ืฅ.
  • ื“ื™ืคึผืจื™ืฉื™ื™ื™ื˜ื™ื“ ื™ื ืกืึทืงื™ืขืจ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืžืขื˜ื”ืึธื“ืก ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ื‘ืœื•ื™ื– ืžื™ื˜ ื“ื™ SMBv1 ืคึผืจืึธื˜ืึธืงืึธืœ: "ื“ื•ืžื™ื™ืŸ ืœืึธื’ืึธื ืก", "ืจื•ื™ NTLMv2 ืึทื•ื˜ื”", "ืงืœื™ื™ื ื˜ ืงืœืึธืจ ื˜ืขืงืกื˜ ืึทื•ื˜ื”", "ืงืœื™ื™ื ื˜ NTLMv2 ืึทื•ื˜ื”", "ืงืœื™ืขื ื˜ ืœืึทื ืžืึทืŸ ืึทื•ื˜ื”" ืื•ืŸ "ืงืœื™ืขื ื˜ ื ื•ืฆืŸ ืกืคึผื ืขื’ืึธ".
  • ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ "ldap ssl ads" ืึธืคึผืฆื™ืข ืื™ื– ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ ืคื•ืŸ smb.conf. ื“ื™ "ืกืขืจื•ื•ืขืจ ื˜ืฉืึทื ื ืขืœ" ืึธืคึผืฆื™ืข ืื™ื– ื’ืขืจื™ื›ื˜ ืฆื• ื–ื™ื™ืŸ ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ ืื™ืŸ ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ืžืขืœื“ื•ื ื’.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’