Summary
This update for samba fixes the following issues:
The username map advice from the CVE-2020-25717 advisory
note has undesired side effects for the local nt token. Fallback
to a SID/UID based mapping if the name based lookup fails (bsc#1192849).
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| SUSE · Enterprise Storage 7 | samba | 4.11.14+git.313.d4e302805e1-4.32.1 |
| SUSE · SLES 15 SP2 Linux Enterprise High Availability Extension 15 SP2 | samba | 4.11.14+git.313.d4e302805e1-4.32.1 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-ESPOS | samba | 4.11.14+git.313.d4e302805e1-4.32.1 |
| SUSE · SLE HPC 15 SP2 Linux Enterprise High Performance Computing 15 SP2-LTSS | samba | 4.11.14+git.313.d4e302805e1-4.32.1 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-BCL | samba | 4.11.14+git.313.d4e302805e1-4.32.1 |
| SUSE · SLES 15 SP2 Linux Enterprise Server 15 SP2-LTSS | samba | 4.11.14+git.313.d4e302805e1-4.32.1 |
| SUSE · SLES for SAP 15 SP2 Linux Enterprise Server for SAP Applications 15 SP2 | samba | 4.11.14+git.313.d4e302805e1-4.32.1 |
| SUSE · Manager Proxy 4.1 | samba | 4.11.14+git.313.d4e302805e1-4.32.1 |
| SUSE · Manager Retail Branch Server 4.1 | samba | 4.11.14+git.313.d4e302805e1-4.32.1 |
| SUSE · Manager Server 4.1 | samba | 4.11.14+git.313.d4e302805e1-4.32.1 |
Vulnerabilities 1
-
Unscored —
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to ca…