Security update for samba

Announcement ID: SUSE-SU-2019:1574-2
Rating: important
References:
Cross-References:
CVSS scores:
  • CVE-2019-12435 ( SUSE ): 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2019-12435 ( NVD ): 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products:
  • SUSE Enterprise Storage 6
  • SUSE Linux Enterprise Server 15 SP1

An update that solves one vulnerability and has four security fixes can now be installed.

Description:

This update for samba fixes the following issues:

Security issues fixed:

  • CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).

Other issues fixed:

  • Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
  • Add ceph_snapshots VFS module; (jsc#SES-183).
  • Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).
  • MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796).
  • Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)
  • Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Enterprise Storage 6
    zypper in -t patch SUSE-Storage-6-2019-1574=1

Package List:

  • SUSE Enterprise Storage 6 (aarch64 x86_64)
    • samba-ceph-4.9.5+git.176.375e1f05788-3.6.1
    • samba-debugsource-4.9.5+git.176.375e1f05788-3.6.1
    • samba-debuginfo-4.9.5+git.176.375e1f05788-3.6.1
    • samba-ceph-debuginfo-4.9.5+git.176.375e1f05788-3.6.1

References: