Unoshandisa Samba here? iwe unofanirwa kugadzirisa kune iyo nyowani yekugadzirisa vhezheni yeSamba 4.11.2

Munguva pfupi yapfuura vagadziri vari kumashure yeiyo Samba chirongwa chakaziviswa kuburikidza nesitatimendi kuburitswa kwe iyo itsva yekugadzirisa vhezheni yeSamba protocol, ichisvika vhezheni yayo nyowani 4.11.2.

Kune avo vasingazive nezve Samba vanofanira kuziva kuti izvi iko kuita kwemahara kweMicrosoft Windows faira yekugovana protocol (yaimbonzi SMB, ichangobva kutumidzwa zita rekuti CIFS) yeUNIX-senge masisitimu. Nenzira iyi, zvinogoneka makomputa api ine GNU / Linux, Mac OS X kana Unix zvakajairika anotaridzika semaseva kana kuita sevatengi paWindows network.

Samba Iyo zvakare inobvumidza kusimbisa vashandisi seiyo Main Domain Controller (PDC), senhengo yedomeini uye kunyangwe seA Active Directory dhatabhesi yeWindows-based network; Kunze kwekukwanisa kushandira mitsara yekudhinda, akagovaniswa madhairekitori uye kuratidza neayo ega mushandisi dura.

Pakati peiyo Unix-senge masystem umo Samba inogona kumhanyisa, kune iyo GNU / Linux migove, Solaris uye akasiyana BSD akasiyana, pakati payo atinogona kuwana Apple's Mac OS X Server.

Nezve Samba 4.11.2

Iyi vhezheni itsva ye Samba 4.11.2 ishanduro yekugadzirisa, iyo yakaburitswa kukwanisa kugadzirisa dzimwe nyaya dzekuchengetedza izvo zvakapihwa muprotocol. Izvo izvo zvinonetsa zvakagadziriswa.

•  CVE-2019-10218: Seva dzinokuvadza dzinogona kukonzera kodhi yemutengi yeSamba kudzosa mazita emafaira ane maparadzanisa enzira kukodhi yekufona.
• CVE-2019-14833- Samba AD DC password yekuongorora script haina kugamuchira yakazara password. Kana iyo password iine akawanda-byte mavara (kwete ASCII), kutarisa pasiwedhi script hakugamuchire rakazara password tambo.
• CVE-2019-14847- Mushandisi ane "tora shanduko" mvumo anogona kukiya AD DC LDAP server kuburikidza dirsync.

Maitiro ekuisa kana kusimudzira kuSamba 4.11.2 paUbuntu uye zvigadzirwa?

Zvakanaka, kune avo vanofarira kugona kuisa iyi nyowani vhezheni yeSamba kana kuda kuvandudza vhezheni yavo yapfuura kune iyi nyowaniVanogona kuzviita nekutevera nhanho dzatinogovana pazasi.

Chinhu chekutanga chatichaita kugovera matanho ekumisikidza Samba 4.11.2. Nekuti iyo update yakaburitswa nguva pfupi yadarika, inovaka yakagadzirirwa Ubuntu haisati yagadzirwa mune zvinyorwa. Saka iyo yekumisikidza ichaitwa kubva kunobva kodhi.

Iye zvino semamwe mashoko eUbuntu 18.04 LTS vashandisi vanogona kushandisa dura rinozovabatsira kuisa iyo nyowani vhezheni yesamba nenzira yakapusa.

Kuti tiwedzere, tinongonyora mune chinouraya:

sudo add-apt-repository ppa:linux-schools/samba-latest

sudo apt-get update

Uye isu tinogona kuisa samba ne:

sudo apt install samba

Kune vamwe vese, isu tinofanirwa kuita muunganidzwa. Kutanga tichaenda kurodha pasi iyo Samba package iyo yatinogona kuwana nekuvhura terminal (unogona kuzviita nekiyi musanganiswa Ctrl + Alt + T) uye mairi tichaenda kunyora murairo unotevera:

wget https://download.samba.org/pub/samba/stable/samba-4.11.2.tar.gz

Mushure meizvozvo isu tichaenda kubvisa pasuru ne:

tar -zxf samba-4.11.2.tar.gz

Isu tinopinda dhairekitori rakagadzirwa ne:

cd samba-4.11.2

Kuve mukati maro, tiri kuzonyora pasuru uye tobva taita iyo yekumisikidza. Chinhu chekutanga chatinofanira kuita ndeche gadza kumwe kutsamira:

sudo apt-get install acl attr autoconf bind9utils bison build-essential \

debhelper dnsutils docbook-xml docbook-xsl flex gdb libjansson-dev krb5-user \

libacl1-dev libaio-dev libarchive-dev libattr1-dev libblkid-dev libbsd-dev \

libcap-dev libcups2-dev libgnutls-dev libgpgme-dev libjson-perl \

libldap2-dev libncurses5-dev libpam0g-dev libparse-yapp-perl \

libpopt-dev libreadline-dev nettle-dev perl perl-modules-5.26 pkg-config \

python-all-dev python-crypto python-dbg python-dev python-dnspython \

python3-dnspython python-gpgme python3-gpgme python-markdown python3-markdown \

python3-dev xsltproc zlib1g-dev liblmdb-dev lmdb-utils

Waita izvi izvozvi isu ticha taipa:

./configure --prefix=/usr/local

Kutanga nekubatanidzwa isu ticha taipa:

make

Kana zvese zvikafamba mushe, kumisikidza kunoitwa ne:

make install

Uye pakupedzisira ngatiisei nharaunda inoshanduka ne:

export PATH=/usr/local/samba/bin/:/usr/local/samba/sbin/:$PATH

Finalmente kune avo vane vhezheni vhezheni, ndiyo vhezheni 4.11.1, vanogona kuisa chigamba nekuchikanda ne:

wget https://download.samba.org/pub/samba/patches/samba-4.11.1-4.11.2.diffs.gz

Isu tinoibvisa ne:

gzip -9 samba-4.11.1-4.11.2.diffs.gz

Isu tinopinda dhairekitori:

cd samba-4.11.1-4.11.2.diffs

Uye isu tinoshandisa chigamba ne:

patch -p0 < samba-4.11.1-4.11.2.diffs

Uye wakagadzirira.