Recommended update for samba

Announcement ID: SUSE-RU-2022:1823-1
Rating: important
References:
Affected Products:
  • SUSE Linux Enterprise High Availability Extension 12 SP5
  • SUSE Linux Enterprise High Performance Computing 12 SP5
  • SUSE Linux Enterprise Server 12 SP5
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5
  • SUSE Linux Enterprise Software Development Kit 12 SP5

An update that has four fixes can now be installed.

Description:

This update for samba fixes the following issues:

  • Revert NIS support removal (bsc#1199247)
  • Add provides to samba-client-libs package to fix upgrades from previous versions (bsc#1198663)
  • Add missing samba-libs requirement to samba-winbind package (bsc#1198255)
  • Add tests for Samba autorid to check for misconfigured range and update manual page on proper range usage
  • Decrease the length of passwords to 120 characters, same as how Windows does, to avoid errors
  • Ensure smb2 signing/enctyption works on all Linux distributions and all different system libraries
  • Ensure to return STATUS_INVALID_PARAMETER when opening 2 objects with same lease key
  • Fix share and server being swapped in smbget password prompt
  • Fix durable handles that won't reconnect if the leased file is written to
  • Fix rmdir silently failing if directory contains unreadable files and hide unreadable
  • Fix SMB2_CLOSE_FLAGS_FULL_INFORMATION failing to return information on renamed file handle
  • Fix shadow_copy2 failing listing snapshotted directories with shadow:fixinodes
  • Fix PAM Kerberos authentication incorrectly failing with a clock skew error
  • Fix samba erroneously applying unix group memberships to user account entries
  • Fix NT_STATUS_ACCESS_DENIED translating into EPERM instead of EACCES in SMBC_server_internal
  • Fix simple bind not working against an RODC (with non-preloaded users)
  • Fix crash of winbind on RODC
  • Fix uncached logon on RODC always failing once
  • Fix KVNO value
  • Fix LDAP simple binds to honour "old password allowed period"
  • Fix wbinfo -a to work reliably with upn names
  • Fix simple bind to properly work against an RODC (with non-preloaded sers)
  • Fix uninitialized litemask in variable in vfs_gpfs module
  • Fix regression of create krb5 conf = yes not working with a single KDC
  • Fix DFS not working on AIX
  • Fix NT error code not properly set when overwriting a file during rename in libsmbclient
  • Fix net ads info sometimes wrongly showing output 'LDAP Server: 0.0.0.0'
  • Fix a 'use-after-free' vulnerability in SMB1 server
  • Fix failure when renaming file on a DFS enabled share
  • Fix ldap simple bind with TLS auditing
  • Fix pam_winbind not allowing gdm login if password is about to expire
  • Fix problem when winbind renews Kerberos (bsc#1196224)
  • Fix regression in virusfilter_vfs_openat causing a file not not to be scanned by ClamAV

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Enterprise Server for SAP Applications 12 SP5
    zypper in -t patch SUSE-SLE-HA-12-SP5-2022-1823=1 SUSE-SLE-SERVER-12-SP5-2022-1823=1
  • SUSE Linux Enterprise High Availability Extension 12 SP5
    zypper in -t patch SUSE-SLE-HA-12-SP5-2022-1823=1
  • SUSE Linux Enterprise Software Development Kit 12 SP5
    zypper in -t patch SUSE-SLE-SDK-12-SP5-2022-1823=1
  • SUSE Linux Enterprise High Performance Computing 12 SP5
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-1823=1
  • SUSE Linux Enterprise Server 12 SP5
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-1823=1

Package List:

  • SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64)
    • samba-ldb-ldap-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-python3-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-python3-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-4.15.7+git.349.746a58a8e61-3.65.1
    • ctdb-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-python3-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-libs-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • ctdb-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-ldb-ldap-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-libs-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-libs-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy0-python3-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-libs-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-debugsource-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy0-python3-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-tool-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-python3-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le)
    • libsamba-policy-python3-devel-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5 (noarch)
    • samba-doc-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64)
    • samba-client-libs-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-libs-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-python3-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-libs-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-python3-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy0-python3-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-libs-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy0-python3-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise High Availability Extension 12 SP5 (ppc64le s390x x86_64)
    • samba-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • ctdb-4.15.7+git.349.746a58a8e61-3.65.1
    • ctdb-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-debugsource-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64)
    • samba-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy-python3-devel-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-devel-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy-devel-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-debugsource-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise Software Development Kit 12 SP5 (s390x x86_64)
    • samba-devel-32bit-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64)
    • samba-ldb-ldap-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-python3-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-python3-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-python3-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-libs-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-ldb-ldap-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-libs-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-libs-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy0-python3-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-debugsource-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-libs-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy0-python3-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-tool-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-python3-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64)
    • samba-devel-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise High Performance Computing 12 SP5 (noarch)
    • samba-doc-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64)
    • samba-client-libs-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-libs-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-python3-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-libs-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-python3-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy0-python3-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-libs-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy0-python3-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64)
    • samba-ldb-ldap-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-python3-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-python3-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-python3-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-libs-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-ldb-ldap-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-libs-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-libs-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy0-python3-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-debugsource-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-libs-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy0-python3-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-tool-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-python3-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise Server 12 SP5 (aarch64)
    • samba-devel-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise Server 12 SP5 (noarch)
    • samba-doc-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise Server 12 SP5 (ppc64le)
    • libsamba-policy-python3-devel-4.15.7+git.349.746a58a8e61-3.65.1
  • SUSE Linux Enterprise Server 12 SP5 (s390x x86_64)
    • samba-client-libs-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-libs-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-python3-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-winbind-libs-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-libs-python3-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy0-python3-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-libs-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • samba-client-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
    • libsamba-policy0-python3-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1

References: