Package samba-winbind-krb5-localauth: Information

The winbind krb5 localauth is a plugin that permits the MIT Kerberos libraries
that Kerberos principals can be validated against local user accounts.
- Add role-usershares control allow or disallow for group users using of
  samba usershares as privilege.
- Add compatibility support for sambashare group as common privilege assigned
  to usershares group (Closes: #44379).
- Update to maintenance release of Samba 4.16 (Samba#15203)
- Security fixes:
  + CVE-2022-42898: Samba's Kerberos libraries and AD DC failed to guard against
                    integer overflows when parsing a PAC on a 32-bit system, which
                    allowed an attacker with a forged PAC to corrupt the heap.
                    https://www.samba.org/samba/security/CVE-2022-42898.html
    Workaround and mitigations:
    * No workaround on 32-bit systems as an AD DC
    * file servers are only impacted if in a non-AD domain
    * 64-bit systems are not exploitable
- Don't treat a missing include file as an error in handle_include().
  This behavior differs between the source3 and source4 parts of Samba.
  So, it should be the same and just not an error (Closes #44214).

Package samba-winbind-krb5-localauth: Information

Last changed