Security update for samba SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2016:0877-1 Final 1 1 2016-03-24T10:42:11Z current 2016-03-24T10:42:11Z 2016-03-24T10:42:11Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for samba This update for the samba server fixes the following issues: Security issue fixed: - CVE-2015-7560: Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); (bsc#968222). Other bugs fixed: - Enable clustering (CTDB) support; (bsc#966271). - s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023). - vfs_fruit: Fix renaming directories with open files; (bso#11065). - Fix MacOS finder error 36 when copying folder to Samba; (bso#11347). - s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). - Fix copying files with vfs_fruit when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). - s3:libsmb: Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). - Reduce the memory footprint of empty string options; (bso#11625). - lib/async_req: Do not install async_connect_send_test; (bso#11639). - docs: Fix typos in man vfs_gpfs; (bso#11641). - smbd: make 'hide dot files' option work with 'store dos attributes = yes'; (bso#11645). - smbcacls: Fix uninitialized variable; (bso#11682). - s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). - Add quotes around path of update-apparmor-samba-profile; (bsc#962177). - Prevent access denied if the share path is '/'; (bso#11647); (bsc#960249). - Ensure samlogon fallback requests are rerouted after kerberos failure; (bsc#953972). - samba: winbind crash -> netlogon_creds_client_authenticator; (bsc#953972) This update was imported from the SUSE:SLE-12-SP1:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00090.html E-Mail link for openSUSE-SU-2016:0877-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.1 ctdb-4.2.4-12.1 ctdb-devel-4.2.4-12.1 ctdb-tests-4.2.4-12.1 libdcerpc-atsvc-devel-4.2.4-12.1 libdcerpc-atsvc0-4.2.4-12.1 libdcerpc-atsvc0-32bit-4.2.4-12.1 libdcerpc-binding0-4.2.4-12.1 libdcerpc-binding0-32bit-4.2.4-12.1 libdcerpc-devel-4.2.4-12.1 libdcerpc-samr-devel-4.2.4-12.1 libdcerpc-samr0-4.2.4-12.1 libdcerpc-samr0-32bit-4.2.4-12.1 libdcerpc0-4.2.4-12.1 libdcerpc0-32bit-4.2.4-12.1 libgensec-devel-4.2.4-12.1 libgensec0-4.2.4-12.1 libgensec0-32bit-4.2.4-12.1 libndr-devel-4.2.4-12.1 libndr-krb5pac-devel-4.2.4-12.1 libndr-krb5pac0-4.2.4-12.1 libndr-krb5pac0-32bit-4.2.4-12.1 libndr-nbt-devel-4.2.4-12.1 libndr-nbt0-4.2.4-12.1 libndr-nbt0-32bit-4.2.4-12.1 libndr-standard-devel-4.2.4-12.1 libndr-standard0-4.2.4-12.1 libndr-standard0-32bit-4.2.4-12.1 libndr0-4.2.4-12.1 libndr0-32bit-4.2.4-12.1 libnetapi-devel-4.2.4-12.1 libnetapi0-4.2.4-12.1 libnetapi0-32bit-4.2.4-12.1 libregistry-devel-4.2.4-12.1 libregistry0-4.2.4-12.1 libregistry0-32bit-4.2.4-12.1 libsamba-credentials-devel-4.2.4-12.1 libsamba-credentials0-4.2.4-12.1 libsamba-credentials0-32bit-4.2.4-12.1 libsamba-hostconfig-devel-4.2.4-12.1 libsamba-hostconfig0-4.2.4-12.1 libsamba-hostconfig0-32bit-4.2.4-12.1 libsamba-passdb-devel-4.2.4-12.1 libsamba-passdb0-4.2.4-12.1 libsamba-passdb0-32bit-4.2.4-12.1 libsamba-policy-devel-4.2.4-12.1 libsamba-policy0-4.2.4-12.1 libsamba-policy0-32bit-4.2.4-12.1 libsamba-util-devel-4.2.4-12.1 libsamba-util0-4.2.4-12.1 libsamba-util0-32bit-4.2.4-12.1 libsamdb-devel-4.2.4-12.1 libsamdb0-4.2.4-12.1 libsamdb0-32bit-4.2.4-12.1 libsmbclient-devel-4.2.4-12.1 libsmbclient-raw-devel-4.2.4-12.1 libsmbclient-raw0-4.2.4-12.1 libsmbclient-raw0-32bit-4.2.4-12.1 libsmbclient0-4.2.4-12.1 libsmbclient0-32bit-4.2.4-12.1 libsmbconf-devel-4.2.4-12.1 libsmbconf0-4.2.4-12.1 libsmbconf0-32bit-4.2.4-12.1 libsmbldap-devel-4.2.4-12.1 libsmbldap0-4.2.4-12.1 libsmbldap0-32bit-4.2.4-12.1 libtevent-util-devel-4.2.4-12.1 libtevent-util0-4.2.4-12.1 libtevent-util0-32bit-4.2.4-12.1 libwbclient-devel-4.2.4-12.1 libwbclient0-4.2.4-12.1 libwbclient0-32bit-4.2.4-12.1 samba-4.2.4-12.1 samba-32bit-4.2.4-12.1 samba-client-4.2.4-12.1 samba-client-32bit-4.2.4-12.1 samba-core-devel-4.2.4-12.1 samba-doc-4.2.4-12.1 samba-libs-4.2.4-12.1 samba-libs-32bit-4.2.4-12.1 samba-pidl-4.2.4-12.1 samba-python-4.2.4-12.1 samba-test-4.2.4-12.1 samba-test-devel-4.2.4-12.1 samba-winbind-4.2.4-12.1 samba-winbind-32bit-4.2.4-12.1 ctdb-4.2.4-12.1 as a component of openSUSE Leap 42.1 ctdb-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 ctdb-tests-4.2.4-12.1 as a component of openSUSE Leap 42.1 libdcerpc-atsvc-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libdcerpc-atsvc0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libdcerpc-atsvc0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libdcerpc-binding0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libdcerpc-binding0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libdcerpc-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libdcerpc-samr-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libdcerpc-samr0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libdcerpc-samr0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libdcerpc0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libdcerpc0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libgensec-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libgensec0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libgensec0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libndr-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libndr-krb5pac-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libndr-krb5pac0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libndr-krb5pac0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libndr-nbt-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libndr-nbt0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libndr-nbt0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libndr-standard-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libndr-standard0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libndr-standard0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libndr0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libndr0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libnetapi-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libnetapi0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libnetapi0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libregistry-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libregistry0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libregistry0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-credentials-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-credentials0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-credentials0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-hostconfig-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-hostconfig0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-hostconfig0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-passdb-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-passdb0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-passdb0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-policy-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-policy0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-policy0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-util-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-util0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamba-util0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamdb-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamdb0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsamdb0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsmbclient-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsmbclient-raw-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsmbclient-raw0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsmbclient-raw0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsmbclient0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsmbclient0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsmbconf-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsmbconf0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsmbconf0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsmbldap-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsmbldap0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libsmbldap0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libtevent-util-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libtevent-util0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libtevent-util0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 libwbclient-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 libwbclient0-4.2.4-12.1 as a component of openSUSE Leap 42.1 libwbclient0-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-client-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-client-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-core-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-doc-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-libs-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-libs-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-pidl-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-python-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-test-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-test-devel-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-winbind-4.2.4-12.1 as a component of openSUSE Leap 42.1 samba-winbind-32bit-4.2.4-12.1 as a component of openSUSE Leap 42.1 The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content. CVE-2015-7560 openSUSE Leap 42.1:ctdb-4.2.4-12.1 openSUSE Leap 42.1:ctdb-devel-4.2.4-12.1 openSUSE Leap 42.1:ctdb-tests-4.2.4-12.1 openSUSE Leap 42.1:libdcerpc-atsvc-devel-4.2.4-12.1 openSUSE Leap 42.1:libdcerpc-atsvc0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libdcerpc-atsvc0-4.2.4-12.1 openSUSE Leap 42.1:libdcerpc-binding0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libdcerpc-binding0-4.2.4-12.1 openSUSE Leap 42.1:libdcerpc-devel-4.2.4-12.1 openSUSE Leap 42.1:libdcerpc-samr-devel-4.2.4-12.1 openSUSE Leap 42.1:libdcerpc-samr0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libdcerpc-samr0-4.2.4-12.1 openSUSE Leap 42.1:libdcerpc0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libdcerpc0-4.2.4-12.1 openSUSE Leap 42.1:libgensec-devel-4.2.4-12.1 openSUSE Leap 42.1:libgensec0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libgensec0-4.2.4-12.1 openSUSE Leap 42.1:libndr-devel-4.2.4-12.1 openSUSE Leap 42.1:libndr-krb5pac-devel-4.2.4-12.1 openSUSE Leap 42.1:libndr-krb5pac0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libndr-krb5pac0-4.2.4-12.1 openSUSE Leap 42.1:libndr-nbt-devel-4.2.4-12.1 openSUSE Leap 42.1:libndr-nbt0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libndr-nbt0-4.2.4-12.1 openSUSE Leap 42.1:libndr-standard-devel-4.2.4-12.1 openSUSE Leap 42.1:libndr-standard0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libndr-standard0-4.2.4-12.1 openSUSE Leap 42.1:libndr0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libndr0-4.2.4-12.1 openSUSE Leap 42.1:libnetapi-devel-4.2.4-12.1 openSUSE Leap 42.1:libnetapi0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libnetapi0-4.2.4-12.1 openSUSE Leap 42.1:libregistry-devel-4.2.4-12.1 openSUSE Leap 42.1:libregistry0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libregistry0-4.2.4-12.1 openSUSE Leap 42.1:libsamba-credentials-devel-4.2.4-12.1 openSUSE Leap 42.1:libsamba-credentials0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libsamba-credentials0-4.2.4-12.1 openSUSE Leap 42.1:libsamba-hostconfig-devel-4.2.4-12.1 openSUSE Leap 42.1:libsamba-hostconfig0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libsamba-hostconfig0-4.2.4-12.1 openSUSE Leap 42.1:libsamba-passdb-devel-4.2.4-12.1 openSUSE Leap 42.1:libsamba-passdb0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libsamba-passdb0-4.2.4-12.1 openSUSE Leap 42.1:libsamba-policy-devel-4.2.4-12.1 openSUSE Leap 42.1:libsamba-policy0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libsamba-policy0-4.2.4-12.1 openSUSE Leap 42.1:libsamba-util-devel-4.2.4-12.1 openSUSE Leap 42.1:libsamba-util0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libsamba-util0-4.2.4-12.1 openSUSE Leap 42.1:libsamdb-devel-4.2.4-12.1 openSUSE Leap 42.1:libsamdb0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libsamdb0-4.2.4-12.1 openSUSE Leap 42.1:libsmbclient-devel-4.2.4-12.1 openSUSE Leap 42.1:libsmbclient-raw-devel-4.2.4-12.1 openSUSE Leap 42.1:libsmbclient-raw0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libsmbclient-raw0-4.2.4-12.1 openSUSE Leap 42.1:libsmbclient0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libsmbclient0-4.2.4-12.1 openSUSE Leap 42.1:libsmbconf-devel-4.2.4-12.1 openSUSE Leap 42.1:libsmbconf0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libsmbconf0-4.2.4-12.1 openSUSE Leap 42.1:libsmbldap-devel-4.2.4-12.1 openSUSE Leap 42.1:libsmbldap0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libsmbldap0-4.2.4-12.1 openSUSE Leap 42.1:libtevent-util-devel-4.2.4-12.1 openSUSE Leap 42.1:libtevent-util0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libtevent-util0-4.2.4-12.1 openSUSE Leap 42.1:libwbclient-devel-4.2.4-12.1 openSUSE Leap 42.1:libwbclient0-32bit-4.2.4-12.1 openSUSE Leap 42.1:libwbclient0-4.2.4-12.1 openSUSE Leap 42.1:samba-32bit-4.2.4-12.1 openSUSE Leap 42.1:samba-4.2.4-12.1 openSUSE Leap 42.1:samba-client-32bit-4.2.4-12.1 openSUSE Leap 42.1:samba-client-4.2.4-12.1 openSUSE Leap 42.1:samba-core-devel-4.2.4-12.1 openSUSE Leap 42.1:samba-doc-4.2.4-12.1 openSUSE Leap 42.1:samba-libs-32bit-4.2.4-12.1 openSUSE Leap 42.1:samba-libs-4.2.4-12.1 openSUSE Leap 42.1:samba-pidl-4.2.4-12.1 openSUSE Leap 42.1:samba-python-4.2.4-12.1 openSUSE Leap 42.1:samba-test-4.2.4-12.1 openSUSE Leap 42.1:samba-test-devel-4.2.4-12.1 openSUSE Leap 42.1:samba-winbind-32bit-4.2.4-12.1 openSUSE Leap 42.1:samba-winbind-4.2.4-12.1 moderate 4.9 AV:A/AC:M/Au:S/C:P/I:P/A:P Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00090.html https://www.suse.com/security/cve/CVE-2015-7560.html CVE-2015-7560 https://bugzilla.suse.com/968222 SUSE Bug 968222