Security update for samba
This update for samba fixes the following issues: Security issues fixed: - CVE-2017-14746: Use-after-free vulnerability (bsc#1060427). - CVE-2017-15275: Server heap memory information leak (bsc#1063008). - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file (bsc#1058624). - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects (bsc#1058565). - CVE-2017-12150: Some code path don't enforce smb signing when they should (bsc#1058565). Bug fixes: - Samba was updated to 4.6.9 (bsc#1065066) see release notes for details. * https://www.samba.org/samba/history/samba-4.6.9.html
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for samba fixes the following issues: Security issues fixed: - CVE-2017-14746: Use-after-free vulnerability (bsc#1060427). - CVE-2017-15275: Server heap memory information leak (bsc#1063008). - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file (bsc#1058624). - CVE-2017-12151: Keep required encryption across SMB3 dfs redirects (bsc#1058565). - CVE-2017-12150: Some code path don't enforce smb signing when they should (bsc#1058565). Bug fixes: - Samba was updated to 4.6.9 (bsc#1065066) see release notes for details. * https://www.samba.org/samba/history/samba-4.6.9.html
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1058565
- https://bugzilla.suse.com/1058622
- https://bugzilla.suse.com/1058624
- https://bugzilla.suse.com/1060427
- https://bugzilla.suse.com/1063008
- https://bugzilla.suse.com/1065066
- https://www.suse.com/security/cve/CVE-2017-12150
- https://www.suse.com/security/cve/CVE-2017-12151
- https://www.suse.com/security/cve/CVE-2017-12163
- https://www.suse.com/security/cve/CVE-2017-14746
- https://www.suse.com/security/cve/CVE-2017-15275
- https://www.suse.com/support/update/announcement/2017/suse-su-20173155-1/