shield Security update for samba

SUSE-SLE-SERVER-12-SP2-2017-1844

This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client (bsc#1058624). - CVE-2017-12150: Always enforce smb signing when it is configured (bsc#1058622). - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects (bsc#1058565). This non-security issue was fixed: - Fix error where short name length was read as 2 bytes, should be 1 (bsc#1042419)

• Release Date
  Nov 10 2017
• References
  Bugzilla: 1064016, 1065892, 1058565, 1058622, 1058624, 1042419
  CVEs: CVE-2017-12150, CVE-2017-12151, CVE-2017-12163
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  libdcerpc-atsvc0
  DCE/RPC AT scheduler service library

  4.2.4-28.21.1

  lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.2.4-28.21.1

  lock src

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  libdcerpc-atsvc0
  DCE/RPC AT scheduler service library

  4.2.4-28.21.1

  lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.2.4-28.21.1

  lock src

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  libdcerpc-atsvc0
  DCE/RPC AT scheduler service library

  4.2.4-28.21.1

  lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.2.4-28.21.1

  lock src

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  libdcerpc-atsvc0
  DCE/RPC AT scheduler service library

  4.2.4-28.21.1

  lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.2.4-28.21.1

  lock src