Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2016:0877-1

Опубликовано: 24 мар. 2016
Источник: suse-cvrf

Описание

Security update for samba

This update for the samba server fixes the following issues:

Security issue fixed:

  • CVE-2015-7560: Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); (bsc#968222).

Other bugs fixed:

  • Enable clustering (CTDB) support; (bsc#966271).
  • s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023).
  • vfs_fruit: Fix renaming directories with open files; (bso#11065).
  • Fix MacOS finder error 36 when copying folder to Samba; (bso#11347).
  • s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400).
  • Fix copying files with vfs_fruit when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466).
  • s3:libsmb: Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624).
  • Reduce the memory footprint of empty string options; (bso#11625).
  • lib/async_req: Do not install async_connect_send_test; (bso#11639).
  • docs: Fix typos in man vfs_gpfs; (bso#11641).
  • smbd: make 'hide dot files' option work with 'store dos attributes = yes'; (bso#11645).
  • smbcacls: Fix uninitialized variable; (bso#11682).
  • s3:smbd: Ignore initial allocation size for directory creation; (bso#11684).
  • Add quotes around path of update-apparmor-samba-profile; (bsc#962177).
  • Prevent access denied if the share path is '/'; (bso#11647); (bsc#960249).
  • Ensure samlogon fallback requests are rerouted after kerberos failure; (bsc#953972).
  • samba: winbind crash -> netlogon_creds_client_authenticator; (bsc#953972)

This update was imported from the SUSE:SLE-12-SP1:Update update project.

Список пакетов

openSUSE Leap 42.1
ctdb-4.2.4-12.1
ctdb-devel-4.2.4-12.1
ctdb-tests-4.2.4-12.1
libdcerpc-atsvc-devel-4.2.4-12.1
libdcerpc-atsvc0-4.2.4-12.1
libdcerpc-atsvc0-32bit-4.2.4-12.1
libdcerpc-binding0-4.2.4-12.1
libdcerpc-binding0-32bit-4.2.4-12.1
libdcerpc-devel-4.2.4-12.1
libdcerpc-samr-devel-4.2.4-12.1
libdcerpc-samr0-4.2.4-12.1
libdcerpc-samr0-32bit-4.2.4-12.1
libdcerpc0-4.2.4-12.1
libdcerpc0-32bit-4.2.4-12.1
libgensec-devel-4.2.4-12.1
libgensec0-4.2.4-12.1
libgensec0-32bit-4.2.4-12.1
libndr-devel-4.2.4-12.1
libndr-krb5pac-devel-4.2.4-12.1
libndr-krb5pac0-4.2.4-12.1
libndr-krb5pac0-32bit-4.2.4-12.1
libndr-nbt-devel-4.2.4-12.1
libndr-nbt0-4.2.4-12.1
libndr-nbt0-32bit-4.2.4-12.1
libndr-standard-devel-4.2.4-12.1
libndr-standard0-4.2.4-12.1
libndr-standard0-32bit-4.2.4-12.1
libndr0-4.2.4-12.1
libndr0-32bit-4.2.4-12.1
libnetapi-devel-4.2.4-12.1
libnetapi0-4.2.4-12.1
libnetapi0-32bit-4.2.4-12.1
libregistry-devel-4.2.4-12.1
libregistry0-4.2.4-12.1
libregistry0-32bit-4.2.4-12.1
libsamba-credentials-devel-4.2.4-12.1
libsamba-credentials0-4.2.4-12.1
libsamba-credentials0-32bit-4.2.4-12.1
libsamba-hostconfig-devel-4.2.4-12.1
libsamba-hostconfig0-4.2.4-12.1
libsamba-hostconfig0-32bit-4.2.4-12.1
libsamba-passdb-devel-4.2.4-12.1
libsamba-passdb0-4.2.4-12.1
libsamba-passdb0-32bit-4.2.4-12.1
libsamba-policy-devel-4.2.4-12.1
libsamba-policy0-4.2.4-12.1
libsamba-policy0-32bit-4.2.4-12.1
libsamba-util-devel-4.2.4-12.1
libsamba-util0-4.2.4-12.1
libsamba-util0-32bit-4.2.4-12.1
libsamdb-devel-4.2.4-12.1
libsamdb0-4.2.4-12.1
libsamdb0-32bit-4.2.4-12.1
libsmbclient-devel-4.2.4-12.1
libsmbclient-raw-devel-4.2.4-12.1
libsmbclient-raw0-4.2.4-12.1
libsmbclient-raw0-32bit-4.2.4-12.1
libsmbclient0-4.2.4-12.1
libsmbclient0-32bit-4.2.4-12.1
libsmbconf-devel-4.2.4-12.1
libsmbconf0-4.2.4-12.1
libsmbconf0-32bit-4.2.4-12.1
libsmbldap-devel-4.2.4-12.1
libsmbldap0-4.2.4-12.1
libsmbldap0-32bit-4.2.4-12.1
libtevent-util-devel-4.2.4-12.1
libtevent-util0-4.2.4-12.1
libtevent-util0-32bit-4.2.4-12.1
libwbclient-devel-4.2.4-12.1
libwbclient0-4.2.4-12.1
libwbclient0-32bit-4.2.4-12.1
samba-4.2.4-12.1
samba-32bit-4.2.4-12.1
samba-client-4.2.4-12.1
samba-client-32bit-4.2.4-12.1
samba-core-devel-4.2.4-12.1
samba-doc-4.2.4-12.1
samba-libs-4.2.4-12.1
samba-libs-32bit-4.2.4-12.1
samba-pidl-4.2.4-12.1
samba-python-4.2.4-12.1
samba-test-4.2.4-12.1
samba-test-devel-4.2.4-12.1
samba-winbind-4.2.4-12.1
samba-winbind-32bit-4.2.4-12.1

Описание

The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.


Затронутые продукты
openSUSE Leap 42.1:ctdb-4.2.4-12.1
openSUSE Leap 42.1:ctdb-devel-4.2.4-12.1
openSUSE Leap 42.1:ctdb-tests-4.2.4-12.1
openSUSE Leap 42.1:libdcerpc-atsvc-devel-4.2.4-12.1

Ссылки