[Samba] Bug 12497 - Access Denied

[Andrew Bartlett]

On Sun, 2020-02-16 at 19:02 +0000, Rowland penny wrote:
> On 16/02/2020 18:52, Jonathan Hunter via samba wrote:
> > Hi,
> > 
> > I understand that bug 12497 was originally made private before the
> > fixes were released, since a CVE was involved.
> > 
> >  From the summary details below, I think that some of my DCs might
> > be
> > suffering from this bug and I would like to find out more info on
> > it -
> > however, even after logging into bugzilla I still can't view the
> > details.
> > 
> > I'm not sure what samba policy is in cases such as this - will the
> > bug
> > remain private?
> > 
> > https://bugzilla.samba.org/show_bug.cgi?id=12497
> 
> Andrew, shouldn't this bug report have been opened after 4.11.5 was 
> released ?

Yes, per 14 and 14a in: 
https://wiki.samba.org/index.php/Samba_Security_Process it should be
public after checking.  I've done that now.

There isn't much more information there, but I certainly do apologise
to the community for the delay in making it public.

Andrew Bartlett
-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT - Expert Open Source
Solutions
https://catalyst.net.nz/services/samba