CVE-2017-2619

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.

A flaw was found in the way Samba handled PAC (Privilege Attribute Certificate) checksums. A remote, authenticated attacker could use this flaw to crash the winbindd process (CVE-2016-2126).

Jann Horn discovered that Samba incorrectly handled symlinks. An authenticated remote attacker could use this issue to access files on the server outside of the exported directories (CVE-2017-2619).

A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root (CVE-2017-7494).

These are all security issues fixed in the ctdb-4.14.6+git.182.2205d5224e3-1.1 package on the GA media of openSUSE Tumbleweed.

This update for samba fixes the following issues:

• Fix CVE-2017-2619 regression with 'follow symlinks = no'; (bsc#1036283, bso#12721).

This update for samba fixes the following issues:

• Fix CVE-2017-2619 regression with 'follow symlinks = no'; (bsc#1036283, bso#12721).

This update for samba fixes the following issues:

• Fix CVE-2017-2619 regression with 'follow symlinks = no'; (bsc#1036283, bso#12721).

This update for samba fixes the following issues:

Security issue fixed:

• CVE-2017-2619: symlink race permits opening files outside share directory (bsc#1027147).

This update for samba fixes the following issues:

Security issues fixed:

• CVE-2017-2619: Symlink race permits opening files outside share directory (bsc#1027147).

Bugfixes:

• Force usage of ncurses6-config thru NCURSES_CONFIG env var (bsc#1023847).
• Add missing ldb module directory (bsc#1012092).
• Don't package man pages for VFS modules that aren't built (bsc#993707).
• sync_req: make async_connect_send() 'reentrant'; (bso#12105); (bsc#1024416).
• Document 'winbind: ignore domains' parameter; (bsc#1019416).
• Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).

This update for samba fixes the following issues:

Security issues fixed:

• CVE-2017-2619: Symlink race permits opening files outside share directory (bsc#1027147).

Bugfixes:

• Don't package man pages for VFS modules that aren't built (bsc#993707).
• sync_req: make async_connect_send() 'reentrant'; (bso#12105); (bsc#1024416).
• Document 'winbind: ignore domains' parameter; (bsc#1019416).
• Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).

This update for samba fixes the following issues:

Security issues fixed:

• CVE-2017-2619: Symlink race permits opening files outside share directory (bsc#1027147).

Bugfixes:

• Don't package man pages for VFS modules that aren't built (bsc#993707).
• sync_req: make async_connect_send() 'reentrant'; (bso#12105); (bsc#1024416).
• Document 'winbind: ignore domains' parameter; (bsc#1019416).
• Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692).

This update for samba fixes the following issues:

Security issue fixed:

• CVE-2017-2619: symlink race permits opening files outside share directory (bsc#1027147). For SUSE Linux Enterprise 11 SP4 this is a re-issue of the update, a regression in the fix has been addressed (bsc#1036283, bso#12721).

Jann Horn discovered that Samba incorrectly handled symlinks. An authenticated remote attacker could use this issue to access files on the server outside of the exported directories.