samba: BADLOCK attack

This document (7017475) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 12 (SLES 12)
SUSE Linux Enterprise Server 12 Service Pack 1 (SLES 12 SP1)

SUSE Linux Enterprise Server 11 Service Pack 4 (SLES 11 SP4)
SUSE Linux Enterprise Server 11 Service Pack 3 LTSS (SLES 11 SP3 LTSS)
SUSE Linux Enterprise Server 11 Service Pack 2 LTSS (SLES 11 SP2 LTSS)

Situation

A Samba related security vulnerability, code named "Badlock", was recently discovered by a member of the Samba team.

More detailed information can be found on badlock.org

Resolution

Please review Document 7017473 for better technical information on how to deal with this issue.

SUSE is already at work with the SAMBA team to make sure patches will be released for the following SLES versions by the time Badlock details are made available on April the 12th 2016:

SLES 12 SP1
SLES 12

SLES 11 SP4
SLES 11 SP3 LTSS
SLES 11 SP2 LTSS

SUSE will ensure to keep your systems secure

Detailed information on how you can quickly patch and update your systems will be made available by SUSE on April the 12th 2016.

Cause

Additional Information

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.