Security update for samba SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:0837-1 Final 1 1 2016-03-21T10:05:53Z current 2016-03-21T10:05:53Z 2016-03-21T10:05:53Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for samba This update for samba fixes the following issues: Security issue fixed: - CVE-2015-7560: Getting and setting Windows ACLs on symlinks can change permissions on link target; (bso#11648); (bsc#968222). Bug fixed: - Fix leaking memory in libsmbclient: Add missing talloc stackframe; (bso#11177); (bsc#967017). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-samba-12466,sledsp4-samba-12466,slessp4-samba-12466 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20160837-1/ Link for SUSE-SU-2016:0837-1 https://lists.suse.com/pipermail/sle-security-updates/2016-March/001959.html E-Mail link for SUSE-SU-2016:0837-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/967017 SUSE Bug 967017 https://bugzilla.suse.com/968222 SUSE Bug 968222 https://www.suse.com/security/cve/CVE-2015-7560/ SUSE CVE CVE-2015-7560 page SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 libldb-devel-3.6.3-67.2 libnetapi-devel-3.6.3-67.2 libnetapi0-3.6.3-67.2 libsmbclient-devel-3.6.3-67.2 libsmbsharemodes-devel-3.6.3-67.2 libsmbsharemodes0-3.6.3-67.2 libtalloc-devel-3.6.3-67.2 libtdb-devel-3.6.3-67.2 libtevent-devel-3.6.3-67.2 libwbclient-devel-3.6.3-67.2 samba-devel-3.6.3-67.2 samba-test-3.6.3-67.2 libldb1-3.6.3-67.2 libldb1-32bit-3.6.3-67.2 libsmbclient0-3.6.3-67.2 libsmbclient0-32bit-3.6.3-67.2 libtalloc2-3.6.3-67.2 libtalloc2-32bit-3.6.3-67.2 libtdb1-3.6.3-67.2 libtdb1-32bit-3.6.3-67.2 libtevent0-3.6.3-67.2 libtevent0-32bit-3.6.3-67.2 libwbclient0-3.6.3-67.2 libwbclient0-32bit-3.6.3-67.2 samba-3.6.3-67.2 samba-32bit-3.6.3-67.2 samba-client-3.6.3-67.2 samba-client-32bit-3.6.3-67.2 samba-doc-3.6.3-67.2 samba-krb-printing-3.6.3-67.2 samba-winbind-3.6.3-67.2 samba-winbind-32bit-3.6.3-67.2 ldapsmb-1.34b-67.2 libsmbclient0-x86-3.6.3-67.2 libtalloc2-x86-3.6.3-67.2 libtdb1-x86-3.6.3-67.2 libtevent0-x86-3.6.3-67.2 libwbclient0-x86-3.6.3-67.2 samba-client-x86-3.6.3-67.2 samba-winbind-x86-3.6.3-67.2 samba-x86-3.6.3-67.2 libldb1-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 libldb1-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 libsmbclient0-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 libsmbclient0-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 libtalloc2-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 libtalloc2-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 libtdb1-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 libtdb1-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 libtevent0-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 libtevent0-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 libwbclient0-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 libwbclient0-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 samba-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 samba-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 samba-client-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 samba-client-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 samba-doc-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 samba-krb-printing-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 samba-winbind-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 samba-winbind-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 ldapsmb-1.34b-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libldb1-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libsmbclient0-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libsmbclient0-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libsmbclient0-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libtalloc2-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libtalloc2-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libtalloc2-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libtdb1-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libtdb1-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libtdb1-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libtevent0-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libtevent0-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libtevent0-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libwbclient0-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libwbclient0-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 libwbclient0-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 samba-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 samba-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 samba-client-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 samba-client-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 samba-client-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 samba-doc-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 samba-krb-printing-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 samba-winbind-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 samba-winbind-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 samba-winbind-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 samba-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server 11 SP4 ldapsmb-1.34b-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libldb1-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libsmbclient0-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libsmbclient0-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libsmbclient0-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libtalloc2-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libtalloc2-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libtalloc2-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libtdb1-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libtdb1-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libtdb1-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libtevent0-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libtevent0-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libtevent0-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libwbclient0-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libwbclient0-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libwbclient0-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 samba-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 samba-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 samba-client-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 samba-client-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 samba-client-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 samba-doc-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 samba-krb-printing-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 samba-winbind-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 samba-winbind-32bit-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 samba-winbind-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 samba-x86-3.6.3-67.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libldb-devel-3.6.3-67.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libnetapi-devel-3.6.3-67.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libnetapi0-3.6.3-67.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libsmbclient-devel-3.6.3-67.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libsmbsharemodes-devel-3.6.3-67.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libsmbsharemodes0-3.6.3-67.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libtalloc-devel-3.6.3-67.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libtdb-devel-3.6.3-67.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libtevent-devel-3.6.3-67.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libwbclient-devel-3.6.3-67.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 samba-devel-3.6.3-67.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 samba-test-3.6.3-67.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content. CVE-2015-7560 SUSE Linux Enterprise Desktop 11 SP4:libldb1-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:libldb1-32bit-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:libsmbclient0-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:libsmbclient0-32bit-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:libtalloc2-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:libtalloc2-32bit-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:libtdb1-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:libtdb1-32bit-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:libtevent0-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:libtevent0-32bit-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:libwbclient0-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:libwbclient0-32bit-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:samba-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:samba-32bit-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:samba-client-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:samba-client-32bit-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:samba-doc-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:samba-krb-printing-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:samba-winbind-3.6.3-67.2 SUSE Linux Enterprise Desktop 11 SP4:samba-winbind-32bit-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:ldapsmb-1.34b-67.2 SUSE Linux Enterprise Server 11 SP4:libldb1-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libsmbclient0-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libsmbclient0-32bit-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libsmbclient0-x86-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libtalloc2-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libtalloc2-32bit-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libtalloc2-x86-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libtdb1-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libtdb1-32bit-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libtdb1-x86-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libtevent0-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libtevent0-32bit-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libtevent0-x86-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libwbclient0-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libwbclient0-32bit-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:libwbclient0-x86-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:samba-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:samba-32bit-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:samba-client-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:samba-client-32bit-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:samba-client-x86-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:samba-doc-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:samba-krb-printing-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:samba-winbind-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:samba-winbind-32bit-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:samba-winbind-x86-3.6.3-67.2 SUSE Linux Enterprise Server 11 SP4:samba-x86-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:ldapsmb-1.34b-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libldb1-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libsmbclient0-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libsmbclient0-32bit-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libsmbclient0-x86-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtalloc2-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtalloc2-32bit-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtalloc2-x86-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtdb1-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtdb1-32bit-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtdb1-x86-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtevent0-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtevent0-32bit-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtevent0-x86-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwbclient0-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwbclient0-32bit-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libwbclient0-x86-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:samba-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:samba-32bit-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:samba-client-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:samba-client-32bit-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:samba-client-x86-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:samba-doc-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:samba-krb-printing-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:samba-winbind-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:samba-winbind-32bit-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:samba-winbind-x86-3.6.3-67.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:samba-x86-3.6.3-67.2 SUSE Linux Enterprise Software Development Kit 11 SP4:libldb-devel-3.6.3-67.2 SUSE Linux Enterprise Software Development Kit 11 SP4:libnetapi-devel-3.6.3-67.2 SUSE Linux Enterprise Software Development Kit 11 SP4:libnetapi0-3.6.3-67.2 SUSE Linux Enterprise Software Development Kit 11 SP4:libsmbclient-devel-3.6.3-67.2 SUSE Linux Enterprise Software Development Kit 11 SP4:libsmbsharemodes-devel-3.6.3-67.2 SUSE Linux Enterprise Software Development Kit 11 SP4:libsmbsharemodes0-3.6.3-67.2 SUSE Linux Enterprise Software Development Kit 11 SP4:libtalloc-devel-3.6.3-67.2 SUSE Linux Enterprise Software Development Kit 11 SP4:libtdb-devel-3.6.3-67.2 SUSE Linux Enterprise Software Development Kit 11 SP4:libtevent-devel-3.6.3-67.2 SUSE Linux Enterprise Software Development Kit 11 SP4:libwbclient-devel-3.6.3-67.2 SUSE Linux Enterprise Software Development Kit 11 SP4:samba-devel-3.6.3-67.2 SUSE Linux Enterprise Software Development Kit 11 SP4:samba-test-3.6.3-67.2 moderate 4.9 AV:A/AC:M/Au:S/C:P/I:P/A:P 4 AV:N/AC:L/Au:S/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20160837-1/ https://www.suse.com/security/cve/CVE-2015-7560.html CVE-2015-7560 https://bugzilla.suse.com/968222 SUSE Bug 968222