Security update for samba SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:1194-1 Final 1 1 2019-05-08T15:05:27Z current 2019-05-08T15:05:27Z 2019-05-08T15:05:27Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for samba This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Save registry file outside share as unprivileged user (bsc#1131060). Non-security issue fixed: - Backport changes to support quotas with SMB2 (bsc#1106119). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-1194,SUSE-SLE-HA-12-2019-1194,SUSE-SLE-SERVER-12-2019-1194 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20191194-1/ Link for SUSE-SU-2019:1194-1 https://lists.suse.com/pipermail/sle-security-updates/2019-May/005431.html E-Mail link for SUSE-SU-2019:1194-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1106119 SUSE Bug 1106119 https://bugzilla.suse.com/1131060 SUSE Bug 1131060 https://www.suse.com/security/cve/CVE-2019-3880/ SUSE CVE CVE-2019-3880 page SUSE Linux Enterprise High Availability Extension 12 SUSE Linux Enterprise Server 12-LTSS ctdb-4.2.4-18.52.1 ctdb-devel-4.2.4-18.52.1 ctdb-tests-4.2.4-18.52.1 libdcerpc-atsvc-devel-4.2.4-18.52.1 libdcerpc-atsvc0-4.2.4-18.52.1 libdcerpc-atsvc0-32bit-4.2.4-18.52.1 libdcerpc-atsvc0-64bit-4.2.4-18.52.1 libdcerpc-binding0-4.2.4-18.52.1 libdcerpc-binding0-32bit-4.2.4-18.52.1 libdcerpc-binding0-64bit-4.2.4-18.52.1 libdcerpc-devel-4.2.4-18.52.1 libdcerpc-samr-devel-4.2.4-18.52.1 libdcerpc-samr0-4.2.4-18.52.1 libdcerpc-samr0-32bit-4.2.4-18.52.1 libdcerpc-samr0-64bit-4.2.4-18.52.1 libdcerpc0-4.2.4-18.52.1 libdcerpc0-32bit-4.2.4-18.52.1 libdcerpc0-64bit-4.2.4-18.52.1 libgensec-devel-4.2.4-18.52.1 libgensec0-4.2.4-18.52.1 libgensec0-32bit-4.2.4-18.52.1 libgensec0-64bit-4.2.4-18.52.1 libndr-devel-4.2.4-18.52.1 libndr-krb5pac-devel-4.2.4-18.52.1 libndr-krb5pac0-4.2.4-18.52.1 libndr-krb5pac0-32bit-4.2.4-18.52.1 libndr-krb5pac0-64bit-4.2.4-18.52.1 libndr-nbt-devel-4.2.4-18.52.1 libndr-nbt0-4.2.4-18.52.1 libndr-nbt0-32bit-4.2.4-18.52.1 libndr-nbt0-64bit-4.2.4-18.52.1 libndr-standard-devel-4.2.4-18.52.1 libndr-standard0-4.2.4-18.52.1 libndr-standard0-32bit-4.2.4-18.52.1 libndr-standard0-64bit-4.2.4-18.52.1 libndr0-4.2.4-18.52.1 libndr0-32bit-4.2.4-18.52.1 libndr0-64bit-4.2.4-18.52.1 libnetapi-devel-4.2.4-18.52.1 libnetapi0-4.2.4-18.52.1 libnetapi0-32bit-4.2.4-18.52.1 libnetapi0-64bit-4.2.4-18.52.1 libregistry-devel-4.2.4-18.52.1 libregistry0-4.2.4-18.52.1 libregistry0-32bit-4.2.4-18.52.1 libregistry0-64bit-4.2.4-18.52.1 libsamba-credentials-devel-4.2.4-18.52.1 libsamba-credentials0-4.2.4-18.52.1 libsamba-credentials0-32bit-4.2.4-18.52.1 libsamba-credentials0-64bit-4.2.4-18.52.1 libsamba-hostconfig-devel-4.2.4-18.52.1 libsamba-hostconfig0-4.2.4-18.52.1 libsamba-hostconfig0-32bit-4.2.4-18.52.1 libsamba-hostconfig0-64bit-4.2.4-18.52.1 libsamba-passdb-devel-4.2.4-18.52.1 libsamba-passdb0-4.2.4-18.52.1 libsamba-passdb0-32bit-4.2.4-18.52.1 libsamba-passdb0-64bit-4.2.4-18.52.1 libsamba-policy-devel-4.2.4-18.52.1 libsamba-policy0-4.2.4-18.52.1 libsamba-policy0-32bit-4.2.4-18.52.1 libsamba-policy0-64bit-4.2.4-18.52.1 libsamba-util-devel-4.2.4-18.52.1 libsamba-util0-4.2.4-18.52.1 libsamba-util0-32bit-4.2.4-18.52.1 libsamba-util0-64bit-4.2.4-18.52.1 libsamdb-devel-4.2.4-18.52.1 libsamdb0-4.2.4-18.52.1 libsamdb0-32bit-4.2.4-18.52.1 libsamdb0-64bit-4.2.4-18.52.1 libsmbclient-devel-4.2.4-18.52.1 libsmbclient-raw-devel-4.2.4-18.52.1 libsmbclient-raw0-4.2.4-18.52.1 libsmbclient-raw0-32bit-4.2.4-18.52.1 libsmbclient-raw0-64bit-4.2.4-18.52.1 libsmbclient0-4.2.4-18.52.1 libsmbclient0-32bit-4.2.4-18.52.1 libsmbclient0-64bit-4.2.4-18.52.1 libsmbconf-devel-4.2.4-18.52.1 libsmbconf0-4.2.4-18.52.1 libsmbconf0-32bit-4.2.4-18.52.1 libsmbconf0-64bit-4.2.4-18.52.1 libsmbldap-devel-4.2.4-18.52.1 libsmbldap0-4.2.4-18.52.1 libsmbldap0-32bit-4.2.4-18.52.1 libsmbldap0-64bit-4.2.4-18.52.1 libtevent-util-devel-4.2.4-18.52.1 libtevent-util0-4.2.4-18.52.1 libtevent-util0-32bit-4.2.4-18.52.1 libtevent-util0-64bit-4.2.4-18.52.1 libwbclient-devel-4.2.4-18.52.1 libwbclient0-4.2.4-18.52.1 libwbclient0-32bit-4.2.4-18.52.1 libwbclient0-64bit-4.2.4-18.52.1 samba-4.2.4-18.52.1 samba-32bit-4.2.4-18.52.1 samba-64bit-4.2.4-18.52.1 samba-client-4.2.4-18.52.1 samba-client-32bit-4.2.4-18.52.1 samba-client-64bit-4.2.4-18.52.1 samba-core-devel-4.2.4-18.52.1 samba-doc-4.2.4-18.52.1 samba-libs-4.2.4-18.52.1 samba-libs-32bit-4.2.4-18.52.1 samba-libs-64bit-4.2.4-18.52.1 samba-pidl-4.2.4-18.52.1 samba-python-4.2.4-18.52.1 samba-test-4.2.4-18.52.1 samba-test-devel-4.2.4-18.52.1 samba-winbind-4.2.4-18.52.1 samba-winbind-32bit-4.2.4-18.52.1 samba-winbind-64bit-4.2.4-18.52.1 ctdb-4.2.4-18.52.1 as a component of SUSE Linux Enterprise High Availability Extension 12 ctdb-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libdcerpc-binding0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libdcerpc-binding0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libdcerpc0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libdcerpc0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libgensec0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libgensec0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr-krb5pac0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr-krb5pac0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr-nbt0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr-nbt0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr-standard0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr-standard0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libnetapi0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libnetapi0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libregistry0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-credentials0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-credentials0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-hostconfig0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-hostconfig0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-passdb0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-passdb0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-util0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-util0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamdb0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamdb0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbclient-raw0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbclient-raw0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbclient0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbclient0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbconf0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbconf0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbldap0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbldap0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libtevent-util0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libtevent-util0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libwbclient0-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS libwbclient0-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-client-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-client-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-doc-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-libs-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-libs-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-winbind-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-winbind-32bit-4.2.4-18.52.1 as a component of SUSE Linux Enterprise Server 12-LTSS A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable. CVE-2019-3880 SUSE Linux Enterprise High Availability Extension 12:ctdb-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:ctdb-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc-binding0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc-binding0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libgensec0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libgensec0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libndr-krb5pac0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libndr-krb5pac0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libndr-nbt0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libndr-nbt0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libndr-standard0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libndr-standard0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libndr0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libndr0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libnetapi0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libnetapi0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libregistry0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-credentials0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-credentials0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-hostconfig0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-hostconfig0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-passdb0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-passdb0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-util0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-util0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsamdb0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsamdb0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient-raw0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient-raw0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsmbconf0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsmbconf0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsmbldap0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libsmbldap0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libtevent-util0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libtevent-util0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libwbclient0-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:libwbclient0-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:samba-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:samba-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:samba-client-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:samba-client-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:samba-doc-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:samba-libs-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:samba-libs-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:samba-winbind-32bit-4.2.4-18.52.1 SUSE Linux Enterprise Server 12-LTSS:samba-winbind-4.2.4-18.52.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191194-1/ https://www.suse.com/security/cve/CVE-2019-3880.html CVE-2019-3880 https://bugzilla.suse.com/1131060 SUSE Bug 1131060 https://bugzilla.suse.com/1139519 SUSE Bug 1139519