Описание
Security update for samba
This update for samba fixes the following issues:
Security issue fixed:
- CVE-2017-2619: symlink race permits opening files outside share directory (bsc#1027147).
Список пакетов
SUSE Linux Enterprise Server 11 SP4
ldapsmb-1.34b-87.1
libldb1-3.6.3-87.1
libsmbclient0-3.6.3-87.1
libsmbclient0-32bit-3.6.3-87.1
libsmbclient0-x86-3.6.3-87.1
libtalloc2-3.6.3-87.1
libtalloc2-32bit-3.6.3-87.1
libtalloc2-x86-3.6.3-87.1
libtdb1-3.6.3-87.1
libtdb1-32bit-3.6.3-87.1
libtdb1-x86-3.6.3-87.1
libtevent0-3.6.3-87.1
libtevent0-32bit-3.6.3-87.1
libtevent0-x86-3.6.3-87.1
libwbclient0-3.6.3-87.1
libwbclient0-32bit-3.6.3-87.1
libwbclient0-x86-3.6.3-87.1
samba-3.6.3-87.1
samba-32bit-3.6.3-87.1
samba-client-3.6.3-87.1
samba-client-32bit-3.6.3-87.1
samba-client-x86-3.6.3-87.1
samba-doc-3.6.3-87.1
samba-krb-printing-3.6.3-87.1
samba-winbind-3.6.3-87.1
samba-winbind-32bit-3.6.3-87.1
samba-winbind-x86-3.6.3-87.1
samba-x86-3.6.3-87.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
ldapsmb-1.34b-87.1
libldb1-3.6.3-87.1
libsmbclient0-3.6.3-87.1
libsmbclient0-32bit-3.6.3-87.1
libsmbclient0-x86-3.6.3-87.1
libtalloc2-3.6.3-87.1
libtalloc2-32bit-3.6.3-87.1
libtalloc2-x86-3.6.3-87.1
libtdb1-3.6.3-87.1
libtdb1-32bit-3.6.3-87.1
libtdb1-x86-3.6.3-87.1
libtevent0-3.6.3-87.1
libtevent0-32bit-3.6.3-87.1
libtevent0-x86-3.6.3-87.1
libwbclient0-3.6.3-87.1
libwbclient0-32bit-3.6.3-87.1
libwbclient0-x86-3.6.3-87.1
samba-3.6.3-87.1
samba-32bit-3.6.3-87.1
samba-client-3.6.3-87.1
samba-client-32bit-3.6.3-87.1
samba-client-x86-3.6.3-87.1
samba-doc-3.6.3-87.1
samba-krb-printing-3.6.3-87.1
samba-winbind-3.6.3-87.1
samba-winbind-32bit-3.6.3-87.1
samba-winbind-x86-3.6.3-87.1
samba-x86-3.6.3-87.1
SUSE Linux Enterprise Software Development Kit 11 SP4
libldb-devel-3.6.3-87.1
libnetapi-devel-3.6.3-87.1
libnetapi0-3.6.3-87.1
libsmbclient-devel-3.6.3-87.1
libsmbsharemodes-devel-3.6.3-87.1
libsmbsharemodes0-3.6.3-87.1
libtalloc-devel-3.6.3-87.1
libtdb-devel-3.6.3-87.1
libtevent-devel-3.6.3-87.1
libwbclient-devel-3.6.3-87.1
samba-devel-3.6.3-87.1
samba-test-3.6.3-87.1
Ссылки
- Link for SUSE-SU-2017:0841-1
- E-Mail link for SUSE-SU-2017:0841-1
- SUSE Security Ratings
- SUSE Bug 1027147
- SUSE CVE CVE-2017-2619 page
Описание
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:ldapsmb-1.34b-87.1
SUSE Linux Enterprise Server 11 SP4:libldb1-3.6.3-87.1
SUSE Linux Enterprise Server 11 SP4:libsmbclient0-3.6.3-87.1
SUSE Linux Enterprise Server 11 SP4:libsmbclient0-32bit-3.6.3-87.1
Ссылки
- CVE-2017-2619
- SUSE Bug 1027147
- SUSE Bug 1036283
- SUSE Bug 1054017