[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250108

 
 

909

 
 

196064

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2017:2650-1 -- SLES libdcerpc-binding0, libdcerpc0, libndr-krb5pac0, libndr-nbt0, libndr-standard0, libndr0, libnetapi0, libsamba-credentials0, libsamba-errors0, libsamba-hostconfig0, libsamba-passdb0, libsamba-util0, libsamdb0, libsmbclient0, libsmbconf0, libsmbldap0, libtevent-util0, libwbclient0, samba

ID: oval:org.secpod.oval:def:89044484Date: (C)2021-06-30   (M)2023-02-20
Class: PATCHFamily: unix




This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client . - CVE-2017-12150: Always enforce smb signing when it is configured . - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects . These non-security issues were fixed: - Fixed error where short name length was read as 2 bytes, should be 1 - Fixed GUID string format on GetPrinter to prevent published printers from disappearing 7 . - Halt endless forest trust scan to prevent winbind from running out of memory .

Platform:
SUSE Linux Enterprise Server 12 SP2
Product:
libdcerpc-binding0
libdcerpc0
libndr-krb5pac0
libndr-nbt0
libndr-standard0
libndr0
libnetapi0
libsamba-credentials0
libsamba-errors0
libsamba-hostconfig0
libsamba-passdb0
libsamba-util0
libsamdb0
libsmbclient0
libsmbconf0
libsmbldap0
libtevent-util0
libwbclient0
samba
Reference:
SUSE-SU-2017:2650-1
CVE-2017-12150
CVE-2017-12151
CVE-2017-12163
CVE    3
CVE-2017-12151
CVE-2017-12163
CVE-2017-12150

© SecPod Technologies