SUSE Security Update: Security update for samba
______________________________________________________________________________

Announcement ID:    SUSE-SU-2019:1574-2
Rating:             important
References:         #1125601 #1130245 #1134452 #1134697 #1137815 
                    
Cross-References:   CVE-2019-12435
Affected Products:
                    SUSE Enterprise Storage 6
______________________________________________________________________________

   An update that solves one vulnerability and has four fixes
   is now available.

Description:

   This update for samba fixes the following issues:

   Security issues fixed:

   - CVE-2019-12435: zone operations can crash rpc server; (bso#13922);
     (bsc#1137815).

   Other issues fixed:

   - Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
   - Add ceph_snapshots VFS module; (jsc#SES-183).
   - Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).
   - MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601);
     (bso#13796).
   - Mac OS X SMB2 implmenetation sees Input/output error or Resource
     temporarily unavailable and drops connection; (bso#13698)
   - Explicitly enable libcephfs POSIX ACL support; (bso#13896);
     (bsc#1130245).


Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Enterprise Storage 6:

      zypper in -t patch SUSE-Storage-6-2019-1574=1



Package List:

   - SUSE Enterprise Storage 6 (aarch64 x86_64):

      samba-ceph-4.9.5+git.176.375e1f05788-3.6.1
      samba-ceph-debuginfo-4.9.5+git.176.375e1f05788-3.6.1
      samba-debuginfo-4.9.5+git.176.375e1f05788-3.6.1
      samba-debugsource-4.9.5+git.176.375e1f05788-3.6.1


References:

   https://www.suse.com/security/cve/CVE-2019-12435.html
   https://bugzilla.suse.com/1125601
   https://bugzilla.suse.com/1130245
   https://bugzilla.suse.com/1134452
   https://bugzilla.suse.com/1134697
   https://bugzilla.suse.com/1137815

_______________________________________________
sle-security-updates mailing list
sle-security-updates@lists.suse.com
http://lists.suse.com/mailman/listinfo/sle-security-updates