SUSE-SU-2023:4040-1

UNKNOWN

Security update for samba

Published Oct 10, 2023

Modified 2 years ago

Fix available

Details

This update for samba fixes the following issues:

CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions. (bsc#1215904)

Affected Packages(23 packages)

ctdb

SUSE Linux Enterprise High Availability Extension 12 SP5

Fixed in:

4.15.13+git.625.ac658f2f12-3.88.1

samba

SUSE Linux Enterprise High Availability Extension 12 SP5SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

4.15.13+git.625.ac658f2f12-3.88.1

libsamba-policy-python3-devel

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

4.15.13+git.625.ac658f2f12-3.88.1

libsamba-policy0-python3

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

4.15.13+git.625.ac658f2f12-3.88.1

libsamba-policy0-python3-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

4.15.13+git.625.ac658f2f12-3.88.1

samba-client

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

4.15.13+git.625.ac658f2f12-3.88.1

samba-client-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

4.15.13+git.625.ac658f2f12-3.88.1

samba-client-libs

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

4.15.13+git.625.ac658f2f12-3.88.1

samba-client-libs-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

4.15.13+git.625.ac658f2f12-3.88.1

samba-devel

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

4.15.13+git.625.ac658f2f12-3.88.1

References

https://bugzilla.suse.com/1215904

https://www.suse.com/security/cve/CVE-2023-4091

https://www.suse.com/support/update/announcement/2023/suse-su-20234040-1/

Upstream

Related

Ecosystems

SUSE Linux Enterprise High Availability Extension 12 SP5 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5

Timeline

PublishedOct 10, 2023

ModifiedOct 10, 2023

SUSE-SU-2023:4040-1 | Mondoo Vulnerability Intelligence