SUSE-RU-2022:1823-1: important: Recommended update for samba

sle-updates at lists.suse.com sle-updates at lists.suse.com
Tue May 24 13:17:01 UTC 2022 

   SUSE Recommended Update: Recommended update for samba
______________________________________________________________________________

Announcement ID:    SUSE-RU-2022:1823-1
Rating:             important
References:         #1196224 #1198255 #1198663 #1199247 
Affected Products:
                    SUSE Linux Enterprise High Availability 12-SP5
                    SUSE Linux Enterprise High Performance Computing 12-SP5
                    SUSE Linux Enterprise Server 12-SP5
                    SUSE Linux Enterprise Server for SAP Applications 12-SP5
                    SUSE Linux Enterprise Software Development Kit 12-SP5
______________________________________________________________________________

   An update that has four recommended fixes can now be
   installed.

Description:

   This update for samba fixes the following issues:

   - Revert NIS support removal (bsc#1199247)
   - Add provides to samba-client-libs package to fix upgrades from previous
     versions (bsc#1198663)
   - Add missing samba-libs requirement to samba-winbind package (bsc#1198255)
   - Add tests for Samba autorid to check for misconfigured range and update
     manual page on proper range usage
   - Decrease the length of passwords to 120 characters, same as how Windows
     does, to avoid errors
   - Ensure smb2 signing/enctyption works on all Linux distributions  and all
     different system libraries
   - Ensure to return STATUS_INVALID_PARAMETER when opening 2 objects with
     same lease key
   - Fix share and server being swapped in smbget password prompt
   - Fix durable handles that won't reconnect if the leased file is written to
   - Fix rmdir silently failing if directory contains unreadable files and
     hide unreadable
   - Fix SMB2_CLOSE_FLAGS_FULL_INFORMATION failing to return information on
     renamed file handle
   - Fix shadow_copy2 failing listing snapshotted directories with
     shadow:fixinodes
   - Fix PAM Kerberos authentication incorrectly failing with a clock skew
     error
   - Fix samba erroneously applying unix group memberships to user account
     entries
   - Fix NT_STATUS_ACCESS_DENIED translating into EPERM instead of EACCES in
     SMBC_server_internal
   - Fix simple bind not working against an RODC (with non-preloaded users)
   - Fix crash of winbind on RODC
   - Fix uncached logon on RODC always failing once
   - Fix KVNO value
   - Fix LDAP simple binds to honour "old password allowed period"
   - Fix `wbinfo -a` to work reliably with upn names
   - Fix simple bind to properly work against an RODC (with non-preloaded
     sers)
   - Fix uninitialized litemask in variable in vfs_gpfs module
   - Fix regression of `create krb5 conf = yes` not working with a single KDC
   - Fix DFS not working on AIX
   - Fix NT error code not properly set when overwriting a file during rename
     in libsmbclient
   - Fix `net ads info` sometimes wrongly showing output 'LDAP Server:
     0.0.0.0'
   - Fix a 'use-after-free' vulnerability in SMB1 server
   - Fix failure when renaming file on a DFS enabled share
   - Fix ldap simple bind with TLS auditing
   - Fix pam_winbind not allowing gdm login if password is about to expire
   - Fix problem when winbind renews Kerberos (bsc#1196224)
   - Fix regression in virusfilter_vfs_openat causing a file not not to be
     scanned by ClamAV


Patch Instructions:

   To install this SUSE Recommended Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Software Development Kit 12-SP5:

      zypper in -t patch SUSE-SLE-SDK-12-SP5-2022-1823=1

   - SUSE Linux Enterprise Server 12-SP5:

      zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-1823=1

   - SUSE Linux Enterprise High Availability 12-SP5:

      zypper in -t patch SUSE-SLE-HA-12-SP5-2022-1823=1



Package List:

   - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64):

      libsamba-policy-devel-4.15.7+git.349.746a58a8e61-3.65.1
      libsamba-policy-python3-devel-4.15.7+git.349.746a58a8e61-3.65.1
      samba-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
      samba-debugsource-4.15.7+git.349.746a58a8e61-3.65.1
      samba-devel-4.15.7+git.349.746a58a8e61-3.65.1

   - SUSE Linux Enterprise Software Development Kit 12-SP5 (s390x x86_64):

      samba-devel-32bit-4.15.7+git.349.746a58a8e61-3.65.1

   - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64):

      libsamba-policy0-python3-4.15.7+git.349.746a58a8e61-3.65.1
      libsamba-policy0-python3-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
      samba-4.15.7+git.349.746a58a8e61-3.65.1
      samba-client-4.15.7+git.349.746a58a8e61-3.65.1
      samba-client-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
      samba-client-libs-4.15.7+git.349.746a58a8e61-3.65.1
      samba-client-libs-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
      samba-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
      samba-debugsource-4.15.7+git.349.746a58a8e61-3.65.1
      samba-ldb-ldap-4.15.7+git.349.746a58a8e61-3.65.1
      samba-ldb-ldap-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
      samba-libs-4.15.7+git.349.746a58a8e61-3.65.1
      samba-libs-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
      samba-libs-python3-4.15.7+git.349.746a58a8e61-3.65.1
      samba-libs-python3-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
      samba-python3-4.15.7+git.349.746a58a8e61-3.65.1
      samba-python3-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
      samba-tool-4.15.7+git.349.746a58a8e61-3.65.1
      samba-winbind-4.15.7+git.349.746a58a8e61-3.65.1
      samba-winbind-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
      samba-winbind-libs-4.15.7+git.349.746a58a8e61-3.65.1
      samba-winbind-libs-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1

   - SUSE Linux Enterprise Server 12-SP5 (s390x x86_64):

      libsamba-policy0-python3-32bit-4.15.7+git.349.746a58a8e61-3.65.1
      libsamba-policy0-python3-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
      samba-client-32bit-4.15.7+git.349.746a58a8e61-3.65.1
      samba-client-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
      samba-client-libs-32bit-4.15.7+git.349.746a58a8e61-3.65.1
      samba-client-libs-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
      samba-libs-32bit-4.15.7+git.349.746a58a8e61-3.65.1
      samba-libs-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
      samba-libs-python3-32bit-4.15.7+git.349.746a58a8e61-3.65.1
      samba-libs-python3-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1
      samba-winbind-libs-32bit-4.15.7+git.349.746a58a8e61-3.65.1
      samba-winbind-libs-debuginfo-32bit-4.15.7+git.349.746a58a8e61-3.65.1

   - SUSE Linux Enterprise Server 12-SP5 (aarch64):

      samba-devel-4.15.7+git.349.746a58a8e61-3.65.1

   - SUSE Linux Enterprise Server 12-SP5 (ppc64le):

      libsamba-policy-python3-devel-4.15.7+git.349.746a58a8e61-3.65.1

   - SUSE Linux Enterprise Server 12-SP5 (noarch):

      samba-doc-4.15.7+git.349.746a58a8e61-3.65.1

   - SUSE Linux Enterprise High Availability 12-SP5 (ppc64le s390x x86_64):

      ctdb-4.15.7+git.349.746a58a8e61-3.65.1
      ctdb-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
      samba-debuginfo-4.15.7+git.349.746a58a8e61-3.65.1
      samba-debugsource-4.15.7+git.349.746a58a8e61-3.65.1


References:

   https://bugzilla.suse.com/1196224
   https://bugzilla.suse.com/1198255
   https://bugzilla.suse.com/1198663
   https://bugzilla.suse.com/1199247

More information about the sle-updates mailing list