SUSE-SU-2016:0814-1

Опубликовано: 18 мар. 2016

Источник: suse-cvrf

Описание

Security update for samba

This update for samba fixes the following issues:

CVE-2015-7560: Getting and setting Windows ACLs on symlinks can change permissions on link target. (bso#11648 bsc#968222)

Also the following bugs were fixed:

Add quotes around path of update-apparmor-samba-profile; (bsc#962177).
Prevent access denied if the share path is '/'; (bso#11647); (bsc#960249).
Ensure samlogon fallback requests are rerouted after kerberos failure; (bsc#953382).
samba: winbind crash -> netlogon_creds_client_authenticator; (bsc#953972).

Список пакетов

SUSE Linux Enterprise Desktop 12

libdcerpc-binding0-4.1.12-18.8.1

libdcerpc-binding0-32bit-4.1.12-18.8.1

libdcerpc0-4.1.12-18.8.1

libdcerpc0-32bit-4.1.12-18.8.1

libgensec0-4.1.12-18.8.1

libgensec0-32bit-4.1.12-18.8.1

libndr-krb5pac0-4.1.12-18.8.1

libndr-krb5pac0-32bit-4.1.12-18.8.1

libndr-nbt0-4.1.12-18.8.1

libndr-nbt0-32bit-4.1.12-18.8.1

libndr-standard0-4.1.12-18.8.1

libndr-standard0-32bit-4.1.12-18.8.1

libndr0-4.1.12-18.8.1

libndr0-32bit-4.1.12-18.8.1

libnetapi0-4.1.12-18.8.1

libnetapi0-32bit-4.1.12-18.8.1

libpdb0-4.1.12-18.8.1

libpdb0-32bit-4.1.12-18.8.1

libregistry0-4.1.12-18.8.1

libsamba-credentials0-4.1.12-18.8.1

libsamba-credentials0-32bit-4.1.12-18.8.1

libsamba-hostconfig0-4.1.12-18.8.1

libsamba-hostconfig0-32bit-4.1.12-18.8.1

libsamba-util0-4.1.12-18.8.1

libsamba-util0-32bit-4.1.12-18.8.1

libsamdb0-4.1.12-18.8.1

libsamdb0-32bit-4.1.12-18.8.1

libsmbclient-raw0-4.1.12-18.8.1

libsmbclient-raw0-32bit-4.1.12-18.8.1

libsmbclient0-4.1.12-18.8.1

libsmbclient0-32bit-4.1.12-18.8.1

libsmbconf0-4.1.12-18.8.1

libsmbconf0-32bit-4.1.12-18.8.1

libsmbldap0-4.1.12-18.8.1

libsmbldap0-32bit-4.1.12-18.8.1

libtevent-util0-4.1.12-18.8.1

libtevent-util0-32bit-4.1.12-18.8.1

libwbclient0-4.1.12-18.8.1

libwbclient0-32bit-4.1.12-18.8.1

samba-4.1.12-18.8.1

samba-32bit-4.1.12-18.8.1

samba-client-4.1.12-18.8.1

samba-client-32bit-4.1.12-18.8.1

samba-doc-4.1.12-18.8.1

samba-libs-4.1.12-18.8.1

samba-libs-32bit-4.1.12-18.8.1

samba-winbind-4.1.12-18.8.1

samba-winbind-32bit-4.1.12-18.8.1

SUSE Linux Enterprise Server 12

libdcerpc-binding0-4.1.12-18.8.1

libdcerpc-binding0-32bit-4.1.12-18.8.1

libdcerpc0-4.1.12-18.8.1

libdcerpc0-32bit-4.1.12-18.8.1

libgensec0-4.1.12-18.8.1

libgensec0-32bit-4.1.12-18.8.1

libndr-krb5pac0-4.1.12-18.8.1

libndr-krb5pac0-32bit-4.1.12-18.8.1

libndr-nbt0-4.1.12-18.8.1

libndr-nbt0-32bit-4.1.12-18.8.1

libndr-standard0-4.1.12-18.8.1

libndr-standard0-32bit-4.1.12-18.8.1

libndr0-4.1.12-18.8.1

libndr0-32bit-4.1.12-18.8.1

libnetapi0-4.1.12-18.8.1

libnetapi0-32bit-4.1.12-18.8.1

libpdb0-4.1.12-18.8.1

libpdb0-32bit-4.1.12-18.8.1

libregistry0-4.1.12-18.8.1

libsamba-credentials0-4.1.12-18.8.1

libsamba-credentials0-32bit-4.1.12-18.8.1

libsamba-hostconfig0-4.1.12-18.8.1

libsamba-hostconfig0-32bit-4.1.12-18.8.1

libsamba-util0-4.1.12-18.8.1

libsamba-util0-32bit-4.1.12-18.8.1

libsamdb0-4.1.12-18.8.1

libsamdb0-32bit-4.1.12-18.8.1

libsmbclient-raw0-4.1.12-18.8.1

libsmbclient-raw0-32bit-4.1.12-18.8.1

libsmbclient0-4.1.12-18.8.1

libsmbclient0-32bit-4.1.12-18.8.1

libsmbconf0-4.1.12-18.8.1

libsmbconf0-32bit-4.1.12-18.8.1

libsmbldap0-4.1.12-18.8.1

libsmbldap0-32bit-4.1.12-18.8.1

libtevent-util0-4.1.12-18.8.1

libtevent-util0-32bit-4.1.12-18.8.1

libwbclient0-4.1.12-18.8.1

libwbclient0-32bit-4.1.12-18.8.1

samba-4.1.12-18.8.1

samba-32bit-4.1.12-18.8.1

samba-client-4.1.12-18.8.1

samba-client-32bit-4.1.12-18.8.1

samba-doc-4.1.12-18.8.1

samba-libs-4.1.12-18.8.1

samba-libs-32bit-4.1.12-18.8.1

samba-winbind-4.1.12-18.8.1

samba-winbind-32bit-4.1.12-18.8.1

SUSE Linux Enterprise Server for SAP Applications 12

libdcerpc-binding0-4.1.12-18.8.1

libdcerpc-binding0-32bit-4.1.12-18.8.1

libdcerpc0-4.1.12-18.8.1

libdcerpc0-32bit-4.1.12-18.8.1

libgensec0-4.1.12-18.8.1

libgensec0-32bit-4.1.12-18.8.1

libndr-krb5pac0-4.1.12-18.8.1

libndr-krb5pac0-32bit-4.1.12-18.8.1

libndr-nbt0-4.1.12-18.8.1

libndr-nbt0-32bit-4.1.12-18.8.1

libndr-standard0-4.1.12-18.8.1

libndr-standard0-32bit-4.1.12-18.8.1

libndr0-4.1.12-18.8.1

libndr0-32bit-4.1.12-18.8.1

libnetapi0-4.1.12-18.8.1

libnetapi0-32bit-4.1.12-18.8.1

libpdb0-4.1.12-18.8.1

libpdb0-32bit-4.1.12-18.8.1

libregistry0-4.1.12-18.8.1

libsamba-credentials0-4.1.12-18.8.1

libsamba-credentials0-32bit-4.1.12-18.8.1

libsamba-hostconfig0-4.1.12-18.8.1

libsamba-hostconfig0-32bit-4.1.12-18.8.1

libsamba-util0-4.1.12-18.8.1

libsamba-util0-32bit-4.1.12-18.8.1

libsamdb0-4.1.12-18.8.1

libsamdb0-32bit-4.1.12-18.8.1

libsmbclient-raw0-4.1.12-18.8.1

libsmbclient-raw0-32bit-4.1.12-18.8.1

libsmbclient0-4.1.12-18.8.1

libsmbclient0-32bit-4.1.12-18.8.1

libsmbconf0-4.1.12-18.8.1

libsmbconf0-32bit-4.1.12-18.8.1

libsmbldap0-4.1.12-18.8.1

libsmbldap0-32bit-4.1.12-18.8.1

libtevent-util0-4.1.12-18.8.1

libtevent-util0-32bit-4.1.12-18.8.1

libwbclient0-4.1.12-18.8.1

libwbclient0-32bit-4.1.12-18.8.1

samba-4.1.12-18.8.1

samba-32bit-4.1.12-18.8.1

samba-client-4.1.12-18.8.1

samba-client-32bit-4.1.12-18.8.1

samba-doc-4.1.12-18.8.1

samba-libs-4.1.12-18.8.1

samba-libs-32bit-4.1.12-18.8.1

samba-winbind-4.1.12-18.8.1

samba-winbind-32bit-4.1.12-18.8.1

SUSE Linux Enterprise Software Development Kit 12

libdcerpc-atsvc-devel-4.1.12-18.8.1

libdcerpc-atsvc0-4.1.12-18.8.1

libdcerpc-devel-4.1.12-18.8.1

libdcerpc-samr-devel-4.1.12-18.8.1

libdcerpc-samr0-4.1.12-18.8.1

libgensec-devel-4.1.12-18.8.1

libndr-devel-4.1.12-18.8.1

libndr-krb5pac-devel-4.1.12-18.8.1

libndr-nbt-devel-4.1.12-18.8.1

libndr-standard-devel-4.1.12-18.8.1

libnetapi-devel-4.1.12-18.8.1

libpdb-devel-4.1.12-18.8.1

libregistry-devel-4.1.12-18.8.1

libsamba-credentials-devel-4.1.12-18.8.1

libsamba-hostconfig-devel-4.1.12-18.8.1

libsamba-policy-devel-4.1.12-18.8.1

libsamba-policy0-4.1.12-18.8.1

libsamba-util-devel-4.1.12-18.8.1

libsamdb-devel-4.1.12-18.8.1

libsmbclient-devel-4.1.12-18.8.1

libsmbclient-raw-devel-4.1.12-18.8.1

libsmbconf-devel-4.1.12-18.8.1

libsmbldap-devel-4.1.12-18.8.1

libsmbsharemodes-devel-4.1.12-18.8.1

libsmbsharemodes0-4.1.12-18.8.1

libtevent-util-devel-4.1.12-18.8.1

libwbclient-devel-4.1.12-18.8.1

samba-core-devel-4.1.12-18.8.1

samba-test-devel-4.1.12-18.8.1

Ссылки

https://www.suse.com/support/update/announcement/2016/suse-su-20160814-1/
Link for SUSE-SU-2016:0814-1
https://lists.suse.com/pipermail/sle-security-updates/2016-March/001954.html
E-Mail link for SUSE-SU-2016:0814-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/953382
SUSE Bug 953382
https://bugzilla.suse.com/953972
SUSE Bug 953972
https://bugzilla.suse.com/960249
SUSE Bug 960249
https://bugzilla.suse.com/962177
SUSE Bug 962177
https://bugzilla.suse.com/968222
SUSE Bug 968222
https://www.suse.com/security/cve/CVE-2015-7560/
SUSE CVE CVE-2015-7560 page

Описание

The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.

Затронутые продукты

SUSE Linux Enterprise Desktop 12:libdcerpc-binding0-32bit-4.1.12-18.8.1

SUSE Linux Enterprise Desktop 12:libdcerpc-binding0-4.1.12-18.8.1

SUSE Linux Enterprise Desktop 12:libdcerpc0-32bit-4.1.12-18.8.1

SUSE Linux Enterprise Desktop 12:libdcerpc0-4.1.12-18.8.1

Ссылки

https://www.suse.com/security/cve/CVE-2015-7560.html
CVE-2015-7560
https://bugzilla.suse.com/968222
SUSE Bug 968222

SUSE-SU-2016:0814-1

Описание

Список пакетов

SUSE Linux Enterprise Desktop 12

SUSE Linux Enterprise Server 12

SUSE Linux Enterprise Server for SAP Applications 12

SUSE Linux Enterprise Software Development Kit 12

Ссылки

Уязвимость: CVE-2015-7560

Описание

Затронутые продукты

Ссылки