Summary
This update for samba fixes the following issues:
The username map advice from the CVE-2020-25717 advisory
note has undesired side effects for the local nt token. Fallback
to a SID/UID based mapping if the name based lookup fails (bsc#1192849).
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| SUSE · HPE Helion OpenStack 8 | samba | 4.6.16+git.313.502515a5bfc-3.67.2 |
| SUSE · SLES 12 SP3 Linux Enterprise High Availability Extension 12 SP3 | samba | 4.6.16+git.313.502515a5bfc-3.67.2 |
| SUSE · SLES 12 SP4 Linux Enterprise High Availability Extension 12 SP4 | samba | 4.6.16+git.313.502515a5bfc-3.67.2 |
| SUSE · SLES 12 SP3 Linux Enterprise Server 12 SP3-BCL | samba | 4.6.16+git.313.502515a5bfc-3.67.2 |
| SUSE · SLES 12 SP3 Linux Enterprise Server 12 SP3-LTSS | samba | 4.6.16+git.313.502515a5bfc-3.67.2 |
| SUSE · SLES 12 SP4 Linux Enterprise Server 12 SP4-LTSS | samba | 4.6.16+git.313.502515a5bfc-3.67.2 |
| SUSE · SLES for SAP 12 SP3 Linux Enterprise Server for SAP Applications 12 SP3 | samba | 4.6.16+git.313.502515a5bfc-3.67.2 |
| SUSE · SLES for SAP 12 SP4 Linux Enterprise Server for SAP Applications 12 SP4 | samba | 4.6.16+git.313.502515a5bfc-3.67.2 |
| SUSE · OpenStack Cloud 8 | samba | 4.6.16+git.313.502515a5bfc-3.67.2 |
| SUSE · OpenStack Cloud 9 | samba | 4.6.16+git.313.502515a5bfc-3.67.2 |
| SUSE · OpenStack Cloud Crowbar 8 | samba | 4.6.16+git.313.502515a5bfc-3.67.2 |
| SUSE · OpenStack Cloud Crowbar 9 | samba | 4.6.16+git.313.502515a5bfc-3.67.2 |
Vulnerabilities 1
-
Unscored —
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to ca…