gpp_maybe
Security update for samba
SUSE-SLE-Module-Basesystem-15-SP5-2023-2929
This update for samba fixes the following issues: samba was updated to version 4.17.9: - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174). - CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability (bsc#1213173). - CVE-2023-34967: Fixed samba spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability (bsc#1213172). - CVE-2023-34968: Fixed spotlight server-side Share Path Disclosure (bsc#1213171). - CVE-2023-3347: Fixed issue where SMB2 packet signing not enforced (bsc#1213170). - CVE-2020-25720: Fixed issue where creating child permission allowed full write to all attributes (bsc#1213386). Bugfixes: - Fixed trust relationship failure (bsc#1213384). - Backported --pidl-developer fixes. - Fixed smbd_scavenger crash when service smbd is stopped. - Fixed issue where vfs_fruit might cause a failing open for delete. - Fixed named crashes on DLZ zone update. - Fixed issue where winbind recurses into itself via rpcd_lsad. - Fixed cli_list looping 100% CPU against pre-lanman2 servers. - Fixed smbclient leaks fds with showacls. - Fixed aes256 smb3 encryption algorithms not allowed in smb3_sid_parse(). - Fixed winbindd getting stuck on NT_STATUS_RPC_SEC_PKG_ERROR. - Fixed smbget memory leak if failed to download files recursively. - Fixed log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower. - Fixed floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c. - Fixed test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners. - Reduce flapping of ridalloc test. - Fixed unreliable large_ldap test. - Fixed filename parser not checking veto files smb.conf parameter. - Fixed mdssvc may crash when initializing. - Fixed broken large directory optimization for non-lcomp path elements - Fixed streams_depot failing to create streams. - Fixed shadow_copy2 and streams_depot issues. - Fixed wbinfo -u fails on ad dc with >1000 users. - Fixed winbindd idmap child contacting the domain controller without a need. - Fixed idmap_autorid may fail to map sids of trusted domains for the first time. - Fixed idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings. - Fixed net ads search -P doesn't work against servers in other domains. - Fixed DS ACEs might be inherited to unrelated object classes. - Fixed temporary smbXsrv_tcon_global.tdb can't be parsed. - Fixed setting veto files = /.*/ breaking listing directories (bsc#1212375). - Fixed dsgetdcname assuming local system uses IPv4.
-
Release DateJul 21 2023
-
ReferencesBugzilla: 1213170, 1213172, 1213174, 1212375, 1213173, 1213171, 1213386, 1213384
CVEs: CVE-2023-34968, CVE-2023-3347, CVE-2020-25720, CVE-2023-34966, CVE-2023-34967, CVE-2022-2127 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Basesystem Module 15.5 x86_64
-
Packageslibsamba-policy-devel
Development files for the Samba AD Group Policy librarylibsamba-policy-python3-devel4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Development files for the Samba AD Group Policy librarylibsamba-policy0-python34.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Active Directory Group Policy librarysamba4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
A SMB/CIFS File, Print, and Authentication Serversamba-ceph4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm lock src
Ceph specific add-ons for Sambasamba-client4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Client Utilitiessamba-client-libs4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba client librariessamba-client-libs-32bit4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba client librariessamba-devel4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Development files shared by Samba subpackagessamba-gpupdate4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Group Policysamba-ldb-ldap4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Ldb Ldap Modulessamba-libs4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba librariessamba-libs-32bit4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba librariessamba-libs-python34.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Python3 dependencies of samba-libssamba-python34.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Python3 librariessamba-tool4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Main Samba administration toolsamba-winbind4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Winbind Daemon and Toolsamba-winbind-libs4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Winbind Daemon librariessamba-winbind-libs-32bit4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Winbind Daemon libraries4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Basesystem Module 15.5 aarch64
-
Packageslibsamba-policy-devel
Development files for the Samba AD Group Policy librarylibsamba-policy-python3-devel4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Development files for the Samba AD Group Policy librarylibsamba-policy0-python34.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Active Directory Group Policy librarysamba4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
A SMB/CIFS File, Print, and Authentication Serversamba-ceph4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm lock src
Ceph specific add-ons for Sambasamba-client4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Client Utilitiessamba-client-libs4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba client librariessamba-devel4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Development files shared by Samba subpackagessamba-gpupdate4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Group Policysamba-ldb-ldap4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Ldb Ldap Modulessamba-libs4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba librariessamba-libs-python34.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Python3 dependencies of samba-libssamba-python34.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Python3 librariessamba-tool4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Main Samba administration toolsamba-winbind4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Winbind Daemon and Toolsamba-winbind-libs4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Winbind Daemon libraries4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Basesystem Module 15.5 s390x
-
Packageslibsamba-policy-devel
Development files for the Samba AD Group Policy librarylibsamba-policy-python3-devel4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Development files for the Samba AD Group Policy librarylibsamba-policy0-python34.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Active Directory Group Policy librarysamba4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
A SMB/CIFS File, Print, and Authentication Serversamba-client4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm lock src
Samba Client Utilitiessamba-client-libs4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba client librariessamba-devel4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Development files shared by Samba subpackagessamba-gpupdate4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Group Policysamba-ldb-ldap4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Ldb Ldap Modulessamba-libs4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba librariessamba-libs-python34.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Python3 dependencies of samba-libssamba-python34.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Python3 librariessamba-tool4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Main Samba administration toolsamba-winbind4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Winbind Daemon and Toolsamba-winbind-libs4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Winbind Daemon libraries4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Basesystem Module 15.5 ppc64le
-
Packageslibsamba-policy-devel
Development files for the Samba AD Group Policy librarylibsamba-policy-python3-devel4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Development files for the Samba AD Group Policy librarylibsamba-policy0-python34.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Active Directory Group Policy librarysamba4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
A SMB/CIFS File, Print, and Authentication Serversamba-client4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm lock src
Samba Client Utilitiessamba-client-libs4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba client librariessamba-devel4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Development files shared by Samba subpackagessamba-gpupdate4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Group Policysamba-ldb-ldap4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Ldb Ldap Modulessamba-libs4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba librariessamba-libs-python34.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Python3 dependencies of samba-libssamba-python34.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Samba Python3 librariessamba-tool4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Main Samba administration toolsamba-winbind4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Winbind Daemon and Toolsamba-winbind-libs4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm
Winbind Daemon libraries4.17.9+git.367.dae41ffdd1f-150500.3.5.1 lock rpm