Security update for samba
This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client (bsc#1058624). - CVE-2017-12150: Always enforce smb signing when it is configured (bsc#1058622). - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects (bsc#1058565). These non-security issues were fixed: - Fixed error where short name length was read as 2 bytes, should be 1 (bsc#1042419)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client (bsc#1058624). - CVE-2017-12150: Always enforce smb signing when it is configured (bsc#1058622). - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects (bsc#1058565). These non-security issues were fixed: - Fixed error where short name length was read as 2 bytes, should be 1 (bsc#1042419)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1042419
- https://bugzilla.suse.com/1058565
- https://bugzilla.suse.com/1058622
- https://bugzilla.suse.com/1058624
- https://www.suse.com/security/cve/CVE-2017-12150
- https://www.suse.com/security/cve/CVE-2017-12151
- https://www.suse.com/security/cve/CVE-2017-12163
- https://www.suse.com/support/update/announcement/2017/suse-su-20172704-1/