shield Security update for samba

SUSE-SLE-SDK-12-SP2-2017-1844

This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client (bsc#1058624). - CVE-2017-12150: Always enforce smb signing when it is configured (bsc#1058622). - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects (bsc#1058565). This non-security issue was fixed: - Fix error where short name length was read as 2 bytes, should be 1 (bsc#1042419)

• Release Date
  Nov 10 2017
• References
  Bugzilla: 1064016, 1065892, 1058565, 1058622, 1058624, 1042419
  CVEs: CVE-2017-12150, CVE-2017-12151, CVE-2017-12163
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.2.4-28.21.1 lock src

  samba-test-devel
  Testing devel files for Samba servers and clients

  4.2.4-28.21.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 aarch64

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.2.4-28.21.1 lock src

  samba-test-devel
  Testing devel files for Samba servers and clients

  4.2.4-28.21.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 x86_64

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.2.4-28.21.1 lock src

  samba-test-devel
  Testing devel files for Samba servers and clients

  4.2.4-28.21.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 s390x

• Packages
  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.2.4-28.21.1 lock src

  samba-test-devel
  Testing devel files for Samba servers and clients

  4.2.4-28.21.1 lock rpm