Описание
Security update for samba
This update for samba fixes the following issues:
- CVE-2025-0620: smbd doesn't pick up group membership changes when re-authenticating an expired SMB session (bsc#1244136).
Other bugfixes:
- net ad join fails with 'Failed to join domain: failed to create kerberos keytab' (bsc#1238063).
Список пакетов
Container suse/multi-linux-manager/5.1/x86_64/server:latest
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Container suse/samba-client:latest
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Container suse/samba-server:latest
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-dcerpc-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Container suse/samba-toolbox:latest
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-Azure-3P
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-Azure-Basic
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-Azure-Standard
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-BYOS-Azure
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-BYOS-EC2
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-BYOS-GCE
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-CHOST-BYOS-Aliyun
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-CHOST-BYOS-Azure
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-CHOST-BYOS-EC2
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-CHOST-BYOS-GCE
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-CHOST-BYOS-GDC
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-CHOST-BYOS-SAP-CCloud
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-EC2
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-EC2-ECS-HVM
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-GCE
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-GCE-3P
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-HPC-Azure
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-HPC-BYOS-Azure
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-HPC-BYOS-EC2
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-HPC-BYOS-GCE
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-Hardened-BYOS-Azure
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-Hardened-BYOS-EC2
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-Hardened-BYOS-GCE
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-Azure
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-Azure-3P
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-Azure-LI-BYOS-Production
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-BYOS-Azure
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-BYOS-EC2
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-BYOS-GCE
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-EC2
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-GCE
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-GCE-3P
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-Hardened-Azure
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-Hardened-BYOS-EC2
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAP-Hardened-GCE
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAPCAL-Azure
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-dcerpc-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAPCAL-EC2
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-dcerpc-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image SLES15-SP7-SAPCAL-GCE
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-dcerpc-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image server-image
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Image server-image-sles15sp7
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
SUSE Linux Enterprise High Availability Extension 15 SP7
ctdb-4.21.6+git.402.80f493f530f-150700.3.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
ldb-tools-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb-devel-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
libldb2-32bit-4.21.6+git.402.80f493f530f-150700.3.3.1
python3-ldb-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-ceph-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-client-libs-32bit-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-dcerpc-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-devel-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-gpupdate-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-ldb-ldap-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-32bit-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-libs-python3-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-python3-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-tool-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-winbind-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-winbind-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
samba-winbind-libs-32bit-4.21.6+git.402.80f493f530f-150700.3.3.1
Ссылки
- Link for SUSE-SU-2025:02230-1
- E-Mail link for SUSE-SU-2025:02230-1
- SUSE Security Ratings
- SUSE Bug 1238063
- SUSE Bug 1244136
- SUSE CVE CVE-2025-0620 page
Описание
A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.
Затронутые продукты
Container suse/multi-linux-manager/5.1/x86_64/server:latest:libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest:samba-client-libs-4.21.6+git.402.80f493f530f-150700.3.3.1
Container suse/samba-client:latest:libldb2-4.21.6+git.402.80f493f530f-150700.3.3.1
Container suse/samba-client:latest:samba-client-4.21.6+git.402.80f493f530f-150700.3.3.1
Ссылки
- CVE-2025-0620
- SUSE Bug 1244136