Summary
This update for Samba provides the following fixes:
- Fix libads' record session expiry for spnego sasl binds. (bsc#979268)
- Fix NT_STATUS_ACCESS_DENIED when accessing windows public share.
- Only validate MIC if 'map to guest' is not being used.
- NetAPP SMB servers don't negotiate NTLMSSP_SIGN. (bsc#977669)
- Fix non-working anonymous smb connections.
- Handle broken mechListMIC response from Windows 2000.
- wbinfo -u or net ads search doesn't work anymore.
- Fix regressions regarding the NTLMSSP hardening of CVE-2016-2110.
- Allow Domain member resolve trusted domains' users.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 12 Linux Enterprise Desktop 12 | samba | 4.2.4-18.20.1 |
| SUSE · SLES 12 Linux Enterprise High Availability Extension 12 | samba | 4.2.4-18.20.1 |
| SUSE · SLES 12 Linux Enterprise Server 12 | samba | 4.2.4-18.20.1 |
| SUSE · SLES for SAP 12 Linux Enterprise Server for SAP Applications 12 | samba | 4.2.4-18.20.1 |
| SUSE · SLES 12 Linux Enterprise Software Development Kit 12 | samba | 4.2.4-18.20.1 |
Vulnerabilities 1
-
Unscored —
The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.…