Security update for samba

SUSE Security Update: Security update for samba
Announcement ID: SUSE-SU-2019:1574-2
Rating: important
References: #1125601 #1130245 #1134452 #1134697 #1137815
Cross-References: CVE-2019-12435
Affected Products:
  • SUSE Enterprise Storage 6

An update that solves one vulnerability and has four fixes is now available.


This update for samba fixes the following issues:
Security issues fixed:

  • CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).

Other issues fixed:
  • Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
  • Add ceph_snapshots VFS module; (jsc#SES-183).
  • Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).
  • MacOS credit accounting breaks with async SESSION SETUP; (bsc#1125601); (bso#13796).
  • Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection; (bso#13698)
  • Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Enterprise Storage 6:
    zypper in -t patch SUSE-Storage-6-2019-1574=1

Package List:

  • SUSE Enterprise Storage 6 (aarch64 x86_64):
    • samba-ceph-4.9.5+git.176.375e1f05788-3.6.1
    • samba-ceph-debuginfo-4.9.5+git.176.375e1f05788-3.6.1
    • samba-debuginfo-4.9.5+git.176.375e1f05788-3.6.1
    • samba-debugsource-4.9.5+git.176.375e1f05788-3.6.1