openSUSE-SU-2019:2458-1

Dashboard / Vulnerabilities / openSUSE-SU-2019:2458-1

openSUSE-SU-2019:2458-1

Summary: Security update for samba

Details: This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14847: User with 'get changes' permission can crash AD DC LDAP server via dirsync (bsc#1154598). - CVE-2019-10218: Client code can return filenames containing path separators (bsc#1144902). - CVE-2019-14833: Fixed Accent with 'check script password' where the Samba AD DC check password script does not receive the full password (bsc#1154289). Other issues fixed: - Fix vfs_ceph realpath (bsc#1134452). - MacOS credit accounting breaks with async SESSION SETUP (bsc#1125601). - Mac OS X SMB2 implmenetation sees Input/output error or Resource temporarily unavailable and drops connection - Explicitly enable libcephfs POSIX ACL support (bsc#1130245). - Fix vfs_ceph ftruncate and fallocate handling (bsc#1127153). This update was imported from the SUSE:SLE-15:Update update project.

References: https://lists.opensuse.org/archives/list/[email protected]/thread/KYWG4CAL266MXJWOZTEBJZ6FOONDSHUS/#KYWG4CAL266MXJWOZTEBJZ6FOONDSHUS, https://bugzilla.suse.com/1125601, https://bugzilla.suse.com/1127153, https://bugzilla.suse.com/1130245, https://bugzilla.suse.com/1134452, https://bugzilla.suse.com/1144902, https://bugzilla.suse.com/1154289, https://bugzilla.suse.com/1154598, https://www.suse.com/security/cve/CVE-2019-10218, https://www.suse.com/security/cve/CVE-2019-14833, https://www.suse.com/security/cve/CVE-2019-14847