I usually don't miss things BUT

[CMH]

Thanks for that info, but I still am not sure I need to do anything 
regarding the samba badlock issue.
It appears to be A Windows issue only.

I have searched and asked and can't get an answer to confirm or deny that.
The good news is that samba can only be accessed internally, not outside 
network connections.


thanks

On 04/15/2016 09:50 AM, Laurent Blume wrote:
> The most recent CSW Samba available is available as an experimental
> package there:
> http://buildfarm.opencsw.org/experimental.html#samba4
>
> It's not me taking care of it, though, so I don't know why it's not been
> pushed to unstable yet.
> As for the issue at hand, you can immediately start trying that
> experimental package to migrate your Samba3 install. There might be some
> configuration adjustements needed. You should then be able to upgrade
> when the latest version is packaged.
>
> HTH,
>
> Laurent
>
> Le 2016/04/15 13:15 +0200, Cmh a écrit:
>> I am being asked to patch samba on my Solaris SPARC box.
>> I am using one version down of smb from the CSW repository...
>>      # /opt/csw/sbin/smbd -V
>>      Version 3.6.14
>>
>> I am looking and not finding a positive answer that *RIX is even at risk
>> for this attack.
>> What I read mentions Windows only (or it seems that way to me).
>> My co-admins that do Windows only know windows.
>> I do not see a patch from CSW (or did I miss that too!)
>>
>> All other recent exploits have clearly defined and ready patchs or fixes
>> for the problems.
>>
>> So thanks for any advice.
>>
>>
>
>   

-- 
ITS Systems @ TTH
Craig M. Houck ><>
204B - 607 777 6827
We are only as good as the problems we solve.