Badlock Bug

  • 0

Badlock Bug

Badlock Bug

On April 12th, 2016, a crucial security bug in Windows and Samba will be disclosed. We call it: Badlock.

Engineers at Microsoft and the Samba Team are working together to get this problem fixed. Patches will be released on April 12th.

Admins and all of you responsible for Windows or Samba server infrastructure: Mark the date. (Again: It’s April 12th, 2016.)

Please get yourself ready to patch all systems on this day. We are pretty sure that there will be exploits soon after we publish all relevant information.


Q&A

Which Samba versions will get patches?

Patches will be available for Samba 4.4, Samba 4.3 and Samba 4.2 on April 12th.

With the release of Samba 4.4.0 on March 22nd the 4.1 release branch has been marked DISCONTINUED.

Please be aware that Samba 4.1 and below are out of support, even for security fixes. We strongly advise users to upgrade to a supported release, so that you will not have to make a major version update at the time you need to get the security fix installed.

While there will be no official security releases for Samba 4.1 and below published by the Samba Team or SerNet (for EnterpriseSAMBA) some vendors probably will backport the patches.

When on April 12th will the patches be released?

Patches will be released around 17:00 UTC. That’s about the same time the Microsoft Patch Tuesday occurs.

Is there a CVE for Badlock?

Yes. Badlock has an assigned CVE. It will be listed here after the patches are released.

Why announce Badlock before April 12th, 2016?

The main goal of this announcement is to give a heads up and to get you
ready to patch all systems as fast as possible and have sysadmin resources
available on the day the patch will be released. Vendors and distributors of Samba are being informed before a security fix is released in any case. This is part of any Samba security release process.

Weighting to the respective interests of advance warning and utmost secrecy we chose to warn you beforehand, so that everyone has a chance to be ready to install the fixes as soon as they are available. Once the patch is released to the public, it will point to attack vectors and exploits will be in the wild in no time.

Yet Another Bug With A Logo?

What branded bugs are able to achieve is best said with one word: Awareness. Furthermore names for bugs can serve as unique identifiers, other than different CVE/MS bug IDs.

It is a thin line between drawing attention to a severe vulnerability that should be taken seriously and overhyping it. This process didn’t start with the branding – it started a while ago with everyone working on fixes.

Who found the Badlock Bug?

Badlock was discovered by Stefan Metzmacher. He’s a member of the international Samba Core Team and works at SerNet on Samba. He reported the bug to Microsoft and has been working closely with them to fix the problem.

Where to find more information?

This page will get updates regularly. Please come back for more information.


Badlock logo is free to use, rights waived via CC0.
[download logo in SVG format]

We are grateful to the Heartbleed team to use their template.

Last updated 2016-03-31 09:30 UTC.


  • 0

Windows 10

Learn about upgrading, Windows 10 features, and more
Windows Home | Upgrade FAQ’s | Windows 10 | Latest Devices



Windows 10
When can I upgrade to Windows 10?

We want to give every customer a great upgrade experience, so we’re rolling it out in an organized way to manage high demand and to make sure that the upgrade is right for your device. After July 29, when Windows 10 is ready for your device, it will download in the background. You’ll then get a notification to schedule your upgrade right away or at another time that’s convenient for you.

Here are some common questions about the upgrade process. Click on the links for answers.

How long does it take to install the upgrade?
What if I have more than one Windows device – can I upgrade them all?
What edition of Windows will I get as part of this free upgrade?
Will my PC or tablet be compatible with Windows 10?

Should you need any help or have any additional questions after upgrading, a Microsoft Answer Tech will be available to assist you.



You’ll hit the ground running

Get Started app

The Get Started app comes pre-installed with Windows 10. It contains all the information you need to take advantage of the new features and be productive right out of the gate.


Cortana

Your truly personal digital assistant, Cortana helps you get more done no matter what device you’re on. By learning about you over time, Cortana becomes more useful every day.1


Microsoft Edge

Use Microsoft Edge to get on the web right away. You can write directly on a webpage and easily share your mark-ups with others, and read distraction-free with the reading view.


Microsoft Support
Microsoft Support

If you need help with Windows 10, support is easy to find. Just use the search box to get a quick answer, a step-by-step tutorial, or a connection to a real person through our Contact Support app.2

Learn more about Windows 10 features


Optimize Windows 10 with a Microsoft account
With a free Microsoft account, you can take your settings, preferences, and files you have backed up on OneDrive with you across all your devices – and not just Windows devices. Plus, you’ll only need to remember one user ID and password. So sign up now, to get the most out of your Windows experience.

Get a Microsoft account


Get more done with Microsoft accessories for Windows 10

Microsoft Sculpt Comfort Mouse
Microsoft Sculpt Comfort Mouse
Microsoft Sculpt Comfort Mouse – with its customizable Windows touch tab – puts new Windows 10 features just a click away.Buy now

Microsoft Wireless Display Adapter
Microsoft Wireless Display Adapter
Microsoft Wireless Display Adapter lets you wirelessly share what’s on your phone, tablet, or laptop with your big-screen HDTV or monitor.Buy now

Xbox One Controller + Cable for Windows
Xbox One Controller + Cable for Windows
Elevate your gaming on Windows 10 with the Xbox One Wireless Controller.Buy now

Join the conversation about Windows 10

Facebook

Like us on Facebook


Twitter

Follow us on Twitter


Pinterest

See us on Pinterest


YouTube

Watch us on YouTube



1 Cortana experience may vary by region and device.

2 Chat available in select markets. Free up and running phone and chat support available 24/7 in English only; available in most other languages during extended business hours. Paid options available in China.

Microsoft respects your privacy. Please read our online Privacy Statement.

If you would prefer not to receive future promotional emails from Microsoft and its family of companies please click here to unsubscribe. These settings will not affect any newsletters you’ve requested or any mandatory service communications that are considered part of certain Microsoft services.

To set your contact preferences for Microsoft Communications, click here.

Microsoft Corporation
One Microsoft Way
Redmond, WA 98052 USA
Microsoft