Security update for samba
This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client (bsc#1058624) - CVE-2017-12150: Always enforce smb signing when it is configured (bsc#1058622) - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects (bsc#1058565) The following non-security issue was fixed: - Fix GUID string format on GetPrinter info request. (bsc#1050707)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client (bsc#1058624) - CVE-2017-12150: Always enforce smb signing when it is configured (bsc#1058622) - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects (bsc#1058565) The following non-security issue was fixed: - Fix GUID string format on GetPrinter info request. (bsc#1050707)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1050707
- https://bugzilla.suse.com/1058565
- https://bugzilla.suse.com/1058622
- https://bugzilla.suse.com/1058624
- https://www.suse.com/security/cve/CVE-2017-12150
- https://www.suse.com/security/cve/CVE-2017-12151
- https://www.suse.com/security/cve/CVE-2017-12163
- https://www.suse.com/support/update/announcement/2017/suse-su-20172695-1/