Summary
This update for samba fixes the following issues:
The username map advice from the CVE-2020-25717 advisory
note has undesired side effects for the local nt token. Fallback
to a SID/UID based mapping if the name based lookup fails (bsc#1192849).
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 15 Linux Enterprise High Availability Extension 15 | samba | 4.7.11+git.358.cb5ede6f1e5-4.60.2 |
| SUSE · SLE HPC 15 Linux Enterprise High Performance Computing 15-ESPOS | samba | 4.7.11+git.358.cb5ede6f1e5-4.60.2 |
| SUSE · SLE HPC 15 Linux Enterprise High Performance Computing 15-LTSS | samba | 4.7.11+git.358.cb5ede6f1e5-4.60.2 |
| SUSE · SLES 15 Linux Enterprise Server 15-LTSS | samba | 4.7.11+git.358.cb5ede6f1e5-4.60.2 |
| SUSE · SLES for SAP 15 Linux Enterprise Server for SAP Applications 15 | samba | 4.7.11+git.358.cb5ede6f1e5-4.60.2 |
Vulnerabilities 1
-
Unscored —
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to ca…