SUSE-SU-2023:2929-1: Security update for samba
This update for samba fixes the following issues: samba was updated to version 4.17.9: CVE-2022-2127: Fixed issue where lmresplen was not checked properly in winbinddpamauthcrapsend (bsc#1213174). CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability (bsc#1213173). CVE-2023-34967: Fixed samba spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability (bsc#1213172). CVE-2023-34968: Fixed spotlight server-side Share Path Disclosure (bsc#1213171). CVE-2023-3347: Fixed issue where SMB2 packet signing not enforced (bsc#1213170). CVE-2020-25720: Fixed issue where creating child permission allowed full write to all attributes (bsc#1213386). Bugfixes: Fixed trust relationship failure (bsc#1213384). Backported --pidl-developer fixes. Fixed smbdscavenger crash when service smbd is stopped. Fixed issue where vfsfruit might cause a failing open for delete. Fixed named crashes on DLZ zone update. Fixed issue where winbind recurses into itself via rpcdlsad. Fixed clilist looping 100% CPU against pre-lanman2 servers. Fixed smbclient leaks fds with showacls. Fixed aes256 smb3 encryption algorithms not allowed in smb3sidparse(). Fixed winbindd getting stuck on NTSTATUSRPCSECPKGERROR. Fixed smbget memory leak if failed to download files recursively. Fixed log flood: smbdcalculateaccessmaskfsp: Access denied: message level should be lower. Fixed floating point exception (FPE) via clipullsend at source3/libsmb/clireadwrite.c. Fixed testtstreammoretcpusertimeoutspin fails intermittently on Rackspace GitLab runners. Reduce flapping of ridalloc test. Fixed unreliable largeldap test. Fixed filename parser not checking veto files smb.conf parameter. Fixed mdssvc may crash when initializing. Fixed broken large directory optimization for non-lcomp path elements Fixed streamsdepot failing to create streams. Fixed shadowcopy2 and streamsdepot issues. Fixed wbinfo -u fails on ad dc with >1000 users. Fixed winbindd idmap child contacting the domain controller without a need. Fixed idmapautorid may fail to map sids of trusted domains for the first time. Fixed idmaphash doesn't use IDTYPEBOTH for reverse mappings. Fixed net ads search -P doesn't work against servers in other domains. Fixed DS ACEs might be inherited to unrelated object classes. Fixed temporary smbXsrvtconglobal.tdb can't be parsed. Fixed setting veto files = /./ breaking listing directories (bsc#1212375). Fixed dsgetdcname assuming local system uses IPv4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/ctdb-pcp-pmda-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-winbindto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-client-libs-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-toolto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-ldb-ldapto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-libs-python3-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-winbind-libs-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-debugsourceto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/ctdb-pcp-pmdato a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/ctdbto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/libsamba-policy-python3-develto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/ctdb-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-python3to a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-testto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/libsamba-policy-develto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-libs-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-develto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-gpupdateto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-ldb-ldap-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/libsamba-policy0-python3-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-client-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-test-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-winbind-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-python3-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/sambato a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 32bit-4.17.9 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 32bit-4.17.9 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 32bit-4.17.9 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 32bit-4.17.9 - Upgrade
Upgrade
suse/samba-develto a version that resolves this vulnerability.Fixed in 32bit-4.17.9 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.17.9 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.17.9 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.17.9 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.17.9 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.17.9 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 32bit-4.17.9 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.17.9 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 32bit-4.17.9 - Upgrade
Upgrade
suse/samba-docto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-ceph-debuginfoto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-cephto a version that resolves this vulnerability.Fixed in 4.17.9 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 64bit-4.17.9 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.17.9 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.17.9 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.17.9 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 64bit-4.17.9 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 64bit-4.17.9 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 64bit-4.17.9 - Upgrade
Upgrade
suse/samba-develto a version that resolves this vulnerability.Fixed in 64bit-4.17.9 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 64bit-4.17.9 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.17.9 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.17.9 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.17.9 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 64bit-4.17.9 - Upgrade
Upgrade
sambato a version that resolves this vulnerability.Fixed in 4.17.9
Event History
Child vulnerabilities
Contains the following vulnerabilities.