Summary
This update for samba fixes the following issues:
The username map advice from the CVE-2020-25717 advisory
note has undesired side effects for the local nt token. Fallback
to a SID/UID based mapping if the name based lookup fails (bsc#1192849).
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| SUSE · Enterprise Storage 6 | samba | 4.9.5+git.477.8163dd03413-3.61.1 |
| SUSE · SLES 15 SP1 Linux Enterprise High Availability Extension 15 SP1 | samba | 4.9.5+git.477.8163dd03413-3.61.1 |
| SUSE · SLE HPC 15 SP1 Linux Enterprise High Performance Computing 15 SP1-ESPOS | samba | 4.9.5+git.477.8163dd03413-3.61.1 |
| SUSE · SLE HPC 15 SP1 Linux Enterprise High Performance Computing 15 SP1-LTSS | samba | 4.9.5+git.477.8163dd03413-3.61.1 |
| SUSE · SLES 15 SP1 Linux Enterprise Server 15 SP1-BCL | samba | 4.9.5+git.477.8163dd03413-3.61.1 |
| SUSE · SLES 15 SP1 Linux Enterprise Server 15 SP1-LTSS | samba | 4.9.5+git.477.8163dd03413-3.61.1 |
| SUSE · SLES for SAP 15 SP1 Linux Enterprise Server for SAP Applications 15 SP1 | samba | 4.9.5+git.477.8163dd03413-3.61.1 |
Vulnerabilities 1
-
Unscored —
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to ca…