Security update for samba

Announcement ID:	SUSE-SU-2017:0862-1
Rating:	important
References:	bsc#1019416 bsc#1024416 bsc#1027147 bsc#993692 bsc#993707
Cross-References:	CVE-2017-2619
CVSS scores:	CVE-2017-2619 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2017-2619 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products:	SUSE Linux Enterprise High Availability Extension 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 LTSS 12 SUSE Linux Enterprise Server for SAP Applications 12

An update that solves one vulnerability and has four security fixes can now be installed.

Description:

This update for samba fixes the following issues:

Security issues fixed: - CVE-2017-2619: Symlink race permits opening files outside share directory (bsc#1027147).

Bugfixes: - Don't package man pages for VFS modules that aren't built (bsc#993707). - sync_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416). - Document "winbind: ignore domains" parameter; (bsc#1019416). - Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise High Availability Extension 12
  zypper in -t patch SUSE-SLE-HA-12-2017-481=1
• SUSE Linux Enterprise Server for SAP Applications 12
  zypper in -t patch SUSE-SLE-HA-12-2017-481=1 SUSE-SLE-SAP-12-2017-481=1
• SUSE Linux Enterprise Server 12 LTSS 12
  zypper in -t patch SUSE-SLE-SERVER-12-2017-481=1

Package List:

• SUSE Linux Enterprise High Availability Extension 12 (s390x x86_64)
  • ctdb-4.2.4-18.35.1
  • ctdb-debuginfo-4.2.4-18.35.1
• SUSE Linux Enterprise Server for SAP Applications 12 (x86_64)
  • libsmbconf0-4.2.4-18.35.1
  • libdcerpc-binding0-debuginfo-4.2.4-18.35.1
  • libsmbconf0-debuginfo-4.2.4-18.35.1
  • libndr-krb5pac0-debuginfo-32bit-4.2.4-18.35.1
  • libsamdb0-32bit-4.2.4-18.35.1
  • libsamba-credentials0-4.2.4-18.35.1
  • libsamba-credentials0-debuginfo-4.2.4-18.35.1
  • libsmbldap0-debuginfo-4.2.4-18.35.1
  • libsamdb0-4.2.4-18.35.1
  • samba-client-debuginfo-32bit-4.2.4-18.35.1
  • libndr-standard0-32bit-4.2.4-18.35.1
  • samba-client-32bit-4.2.4-18.35.1
  • libsmbclient-raw0-debuginfo-4.2.4-18.35.1
  • libsamdb0-debuginfo-4.2.4-18.35.1
  • samba-libs-debuginfo-4.2.4-18.35.1
  • libwbclient0-debuginfo-32bit-4.2.4-18.35.1
  • samba-32bit-4.2.4-18.35.1
  • samba-client-4.2.4-18.35.1
  • libsamba-credentials0-32bit-4.2.4-18.35.1
  • libsamba-util0-debuginfo-4.2.4-18.35.1
  • libsamdb0-debuginfo-32bit-4.2.4-18.35.1
  • libsmbclient0-debuginfo-32bit-4.2.4-18.35.1
  • libndr-nbt0-4.2.4-18.35.1
  • libdcerpc-binding0-debuginfo-32bit-4.2.4-18.35.1
  • libgensec0-4.2.4-18.35.1
  • libndr0-32bit-4.2.4-18.35.1
  • libregistry0-debuginfo-4.2.4-18.35.1
  • ctdb-4.2.4-18.35.1
  • libnetapi0-debuginfo-4.2.4-18.35.1
  • libtevent-util0-32bit-4.2.4-18.35.1
  • libsmbclient-raw0-debuginfo-32bit-4.2.4-18.35.1
  • libdcerpc0-4.2.4-18.35.1
  • libgensec0-debuginfo-4.2.4-18.35.1
  • libndr-krb5pac0-debuginfo-4.2.4-18.35.1
  • libsmbclient-raw0-4.2.4-18.35.1
  • samba-libs-debuginfo-32bit-4.2.4-18.35.1
  • libtevent-util0-4.2.4-18.35.1
  • libsmbldap0-32bit-4.2.4-18.35.1
  • libdcerpc0-32bit-4.2.4-18.35.1
  • libndr0-4.2.4-18.35.1
  • samba-debuginfo-4.2.4-18.35.1
  • libsmbldap0-debuginfo-32bit-4.2.4-18.35.1
  • libdcerpc0-debuginfo-4.2.4-18.35.1
  • samba-libs-4.2.4-18.35.1
  • libsamba-passdb0-debuginfo-4.2.4-18.35.1
  • libtevent-util0-debuginfo-32bit-4.2.4-18.35.1
  • libndr0-debuginfo-32bit-4.2.4-18.35.1
  • libsamba-hostconfig0-debuginfo-4.2.4-18.35.1
  • libdcerpc-binding0-4.2.4-18.35.1
  • samba-winbind-32bit-4.2.4-18.35.1
  • libsamba-hostconfig0-debuginfo-32bit-4.2.4-18.35.1
  • libndr-krb5pac0-32bit-4.2.4-18.35.1
  • libwbclient0-debuginfo-4.2.4-18.35.1
  • libdcerpc-binding0-32bit-4.2.4-18.35.1
  • samba-winbind-debuginfo-32bit-4.2.4-18.35.1
  • libndr0-debuginfo-4.2.4-18.35.1
  • libsamba-hostconfig0-4.2.4-18.35.1
  • libsmbconf0-debuginfo-32bit-4.2.4-18.35.1
  • libndr-nbt0-32bit-4.2.4-18.35.1
  • libsmbldap0-4.2.4-18.35.1
  • libsmbclient0-32bit-4.2.4-18.35.1
  • libndr-krb5pac0-4.2.4-18.35.1
  • libgensec0-debuginfo-32bit-4.2.4-18.35.1
  • libsamba-passdb0-4.2.4-18.35.1
  • libndr-standard0-debuginfo-32bit-4.2.4-18.35.1
  • libsmbclient-raw0-32bit-4.2.4-18.35.1
  • libndr-standard0-4.2.4-18.35.1
  • libsamba-passdb0-debuginfo-32bit-4.2.4-18.35.1
  • libndr-nbt0-debuginfo-32bit-4.2.4-18.35.1
  • libsamba-util0-debuginfo-32bit-4.2.4-18.35.1
  • samba-debuginfo-32bit-4.2.4-18.35.1
  • libsmbconf0-32bit-4.2.4-18.35.1
  • libnetapi0-debuginfo-32bit-4.2.4-18.35.1
  • libwbclient0-32bit-4.2.4-18.35.1
  • samba-4.2.4-18.35.1
  • libsamba-hostconfig0-32bit-4.2.4-18.35.1
  • libwbclient0-4.2.4-18.35.1
  • libndr-standard0-debuginfo-4.2.4-18.35.1
  • samba-libs-32bit-4.2.4-18.35.1
  • samba-debugsource-4.2.4-18.35.1
  • samba-winbind-debuginfo-4.2.4-18.35.1
  • libndr-nbt0-debuginfo-4.2.4-18.35.1
  • libnetapi0-32bit-4.2.4-18.35.1
  • libsamba-passdb0-32bit-4.2.4-18.35.1
  • samba-client-debuginfo-4.2.4-18.35.1
  • libdcerpc0-debuginfo-32bit-4.2.4-18.35.1
  • libtevent-util0-debuginfo-4.2.4-18.35.1
  • libgensec0-32bit-4.2.4-18.35.1
  • libsmbclient0-4.2.4-18.35.1
  • libsamba-util0-32bit-4.2.4-18.35.1
  • libsamba-credentials0-debuginfo-32bit-4.2.4-18.35.1
  • libsamba-util0-4.2.4-18.35.1
  • libregistry0-4.2.4-18.35.1
  • ctdb-debuginfo-4.2.4-18.35.1
  • libnetapi0-4.2.4-18.35.1
  • samba-winbind-4.2.4-18.35.1
  • libsmbclient0-debuginfo-4.2.4-18.35.1
• SUSE Linux Enterprise Server for SAP Applications 12 (noarch)
  • samba-doc-4.2.4-18.35.1
• SUSE Linux Enterprise Server 12 LTSS 12 (ppc64le s390x x86_64)
  • libsmbconf0-4.2.4-18.35.1
  • libdcerpc-binding0-debuginfo-4.2.4-18.35.1
  • libndr-nbt0-debuginfo-4.2.4-18.35.1
  • libndr0-debuginfo-4.2.4-18.35.1
  • libsamba-hostconfig0-4.2.4-18.35.1
  • libsmbconf0-debuginfo-4.2.4-18.35.1
  • samba-winbind-debuginfo-4.2.4-18.35.1
  • libsmbldap0-4.2.4-18.35.1
  • libregistry0-debuginfo-4.2.4-18.35.1
  • ctdb-4.2.4-18.35.1
  • libnetapi0-debuginfo-4.2.4-18.35.1
  • libndr-krb5pac0-4.2.4-18.35.1
  • libsamba-credentials0-4.2.4-18.35.1
  • samba-client-debuginfo-4.2.4-18.35.1
  • libsamba-passdb0-4.2.4-18.35.1
  • libsamba-credentials0-debuginfo-4.2.4-18.35.1
  • libsmbldap0-debuginfo-4.2.4-18.35.1
  • libdcerpc0-4.2.4-18.35.1
  • libsamdb0-4.2.4-18.35.1
  • libtevent-util0-debuginfo-4.2.4-18.35.1
  • libgensec0-debuginfo-4.2.4-18.35.1
  • libsmbclient-raw0-debuginfo-4.2.4-18.35.1
  • libndr-krb5pac0-debuginfo-4.2.4-18.35.1
  • libsamdb0-debuginfo-4.2.4-18.35.1
  • samba-libs-debuginfo-4.2.4-18.35.1
  • libsmbclient-raw0-4.2.4-18.35.1
  • libsmbclient0-4.2.4-18.35.1
  • libndr-standard0-4.2.4-18.35.1
  • libtevent-util0-4.2.4-18.35.1
  • libsamba-util0-4.2.4-18.35.1
  • samba-client-4.2.4-18.35.1
  • libregistry0-4.2.4-18.35.1
  • libndr0-4.2.4-18.35.1
  • ctdb-debuginfo-4.2.4-18.35.1
  • samba-debuginfo-4.2.4-18.35.1
  • libdcerpc0-debuginfo-4.2.4-18.35.1
  • samba-libs-4.2.4-18.35.1
  • libnetapi0-4.2.4-18.35.1
  • libsamba-passdb0-debuginfo-4.2.4-18.35.1
  • libsamba-hostconfig0-debuginfo-4.2.4-18.35.1
  • libdcerpc-binding0-4.2.4-18.35.1
  • libsamba-util0-debuginfo-4.2.4-18.35.1
  • samba-4.2.4-18.35.1
  • samba-winbind-4.2.4-18.35.1
  • libwbclient0-4.2.4-18.35.1
  • libndr-standard0-debuginfo-4.2.4-18.35.1
  • libsmbclient0-debuginfo-4.2.4-18.35.1
  • libndr-nbt0-4.2.4-18.35.1
  • samba-debugsource-4.2.4-18.35.1
  • libwbclient0-debuginfo-4.2.4-18.35.1
  • libgensec0-4.2.4-18.35.1
• SUSE Linux Enterprise Server 12 LTSS 12 (noarch)
  • samba-doc-4.2.4-18.35.1
• SUSE Linux Enterprise Server 12 LTSS 12 (s390x x86_64)
  • libndr0-32bit-4.2.4-18.35.1
  • libsmbconf0-debuginfo-32bit-4.2.4-18.35.1
  • libndr-nbt0-32bit-4.2.4-18.35.1
  • libndr-krb5pac0-debuginfo-32bit-4.2.4-18.35.1
  • libnetapi0-32bit-4.2.4-18.35.1
  • libsamdb0-32bit-4.2.4-18.35.1
  • libsmbclient0-32bit-4.2.4-18.35.1
  • libsamba-passdb0-32bit-4.2.4-18.35.1
  • libgensec0-debuginfo-32bit-4.2.4-18.35.1
  • libtevent-util0-32bit-4.2.4-18.35.1
  • libsmbclient-raw0-debuginfo-32bit-4.2.4-18.35.1
  • libdcerpc0-debuginfo-32bit-4.2.4-18.35.1
  • libndr-standard0-debuginfo-32bit-4.2.4-18.35.1
  • samba-client-debuginfo-32bit-4.2.4-18.35.1
  • libndr-standard0-32bit-4.2.4-18.35.1
  • samba-client-32bit-4.2.4-18.35.1
  • libgensec0-32bit-4.2.4-18.35.1
  • libsmbclient-raw0-32bit-4.2.4-18.35.1
  • libsamba-util0-32bit-4.2.4-18.35.1
  • libwbclient0-debuginfo-32bit-4.2.4-18.35.1
  • samba-libs-debuginfo-32bit-4.2.4-18.35.1
  • libsamba-passdb0-debuginfo-32bit-4.2.4-18.35.1
  • samba-32bit-4.2.4-18.35.1
  • libndr-nbt0-debuginfo-32bit-4.2.4-18.35.1
  • libsamba-util0-debuginfo-32bit-4.2.4-18.35.1
  • libsamba-credentials0-debuginfo-32bit-4.2.4-18.35.1
  • libsmbldap0-32bit-4.2.4-18.35.1
  • libsamba-credentials0-32bit-4.2.4-18.35.1
  • samba-debuginfo-32bit-4.2.4-18.35.1
  • libdcerpc0-32bit-4.2.4-18.35.1
  • libsmbconf0-32bit-4.2.4-18.35.1
  • libnetapi0-debuginfo-32bit-4.2.4-18.35.1
  • libsmbldap0-debuginfo-32bit-4.2.4-18.35.1
  • libwbclient0-32bit-4.2.4-18.35.1
  • libtevent-util0-debuginfo-32bit-4.2.4-18.35.1
  • libndr0-debuginfo-32bit-4.2.4-18.35.1
  • libsamba-hostconfig0-32bit-4.2.4-18.35.1
  • samba-winbind-32bit-4.2.4-18.35.1
  • libsamba-hostconfig0-debuginfo-32bit-4.2.4-18.35.1
  • libsamdb0-debuginfo-32bit-4.2.4-18.35.1
  • libsmbclient0-debuginfo-32bit-4.2.4-18.35.1
  • samba-libs-32bit-4.2.4-18.35.1
  • libndr-krb5pac0-32bit-4.2.4-18.35.1
  • libdcerpc-binding0-32bit-4.2.4-18.35.1
  • libdcerpc-binding0-debuginfo-32bit-4.2.4-18.35.1
  • samba-winbind-debuginfo-32bit-4.2.4-18.35.1

References:

• https://www.suse.com/security/cve/CVE-2017-2619.html
• https://bugzilla.suse.com/show_bug.cgi?id=1019416
• https://bugzilla.suse.com/show_bug.cgi?id=1024416
• https://bugzilla.suse.com/show_bug.cgi?id=1027147
• https://bugzilla.suse.com/show_bug.cgi?id=993692
• https://bugzilla.suse.com/show_bug.cgi?id=993707