0

I configured a network share using the guidance found here:

http://raspberrypihq.com/how-to-share-a-folder-with-a-windows-computer-from-a-raspberry-pi/

But after everything was successfully configured and tested, I was dismayed to learn that an older release branch had been installed, leaving me potentially vulnerable to attack:

If you update your Samba version to 4.6.4 (4.5.10 or 4.4.14 if you are on older release branches), the exploit can’t be used...

I checked, and I'm running Samba v4.2.14:

root@RASPBERRY:/home/pi# aptitude show samba
Package: samba                           
State: installed
Automatically installed: no
Version: 2:4.2.14+dfsg-0+deb8u6
Priority: optional
Section: net
Maintainer: Debian Samba Maintainers <pkg-samba-maint@lists.alioth.debian.org>
Architecture: armhf
Uncompressed Size: 11.2 M

How can I update to the latest release branch?

I'm surprised at how difficult it is to find this. I would have thought it'd be a fairly common task.

  • You will likely have to download and install from source. – Steve Robillard Jun 30 '17 at 22:51
  • @SteveRobillard — OK, I'm game... how is that done? – InteXX Jun 30 '17 at 22:53
  • 1
    Be warned you are going down a rabbitt hole if you plan to update every installed package to the latest version to prevent a security breach. What about the security issues introduced by the new version? Do you permit inbound connections from the internet to your Pi? Do you control the local LAN? Are you running a firewall on the Pi? on your router? Are you running intrusion detection software? How are you logging? Where are you logging? Do you even read the logs? The samba.org wiki has all the info needed wiki.samba.org/index.php/Build_Samba_from_Source – Steve Robillard Jun 30 '17 at 22:56
  • @SteveRobillard — Hoo boy. OK, I get you. Mostly I'm just trying to guard against this latest round of RansomWare by making sure I'm using the latest version of SMB. I tried forcing SMB2 using this advice, but I'm not sure how to verify that it's actually working. Any tips on that would be appreciated. – InteXX Jun 30 '17 at 23:04
  • smbd -V will print the version to your screen. – Steve Robillard Jun 30 '17 at 23:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.