File _patchinfo of Package patchinfo.5007

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.5007

<patchinfo incident="5007">
  <issue id="1058565" tracker="bnc">VUL-0: EMBARGOED: CVE-2017-12151: samba: Keep required encryption across SMB3 dfs redirects</issue>
  <issue id="1058622" tracker="bnc">VUL-0: EMBARGOED: CVE-2017-12150: samba: Some code path don't enforce smb signing, when they should.</issue>
  <issue id="1058624" tracker="bnc">VUL-0: EMBARGOED: CVE-2017-12163: samba: Server memory information leak over SMB1</issue>
  <issue id="2017-12150" tracker="cve" />
  <issue id="2017-12151" tracker="cve" />
  <issue id="2017-12163" tracker="cve" />
  <issue id="1042419" tracker="bnc">smbclient unable to parse name from info level 260 on windows10</issue>
  <category>security</category>
  <rating>moderate</rating>
  <packager>npower</packager>
  <description>
This update for samba fixes several issues.

These security issues were fixed:

- CVE-2017-12163: Prevent client short SMB1 write from writing server memory to
  file, leaking information from the server to the client (bsc#1058624).
- CVE-2017-12150: Always enforce smb signing when it is configured (bsc#1058622).
- CVE-2017-12151: Keep required encryption across SMB3 dfs redirects (bsc#1058565).

This non-security issue was fixed:

- Fix error where short name length was read as 2 bytes, should be 1 (bsc#1042419)
</description>
  <summary>Security update for samba</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.5007

Places