Security update for samba SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:0252-1 Final 1 1 2022-01-31T15:10:24Z current 2022-01-31T15:10:24Z 2022-01-31T15:10:24Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for samba This update for samba fixes the following issues: - CVE-2021-44142: Fixed out-of-Bound Read/Write on Samba vfs_fruit module. (bsc#1194859) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-252,SUSE-SLE-SERVER-12-SP2-BCL-2022-252 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20220252-1/ Link for SUSE-SU-2022:0252-1 https://lists.suse.com/pipermail/sle-security-updates/2022-January/010150.html E-Mail link for SUSE-SU-2022:0252-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1194859 SUSE Bug 1194859 https://www.suse.com/security/cve/CVE-2021-44142/ SUSE CVE CVE-2021-44142 page SUSE Linux Enterprise Server 12 SP2-BCL ctdb-4.4.2-38.48.1 ctdb-tests-4.4.2-38.48.1 libdcerpc-binding0-4.4.2-38.48.1 libdcerpc-binding0-32bit-4.4.2-38.48.1 libdcerpc-binding0-64bit-4.4.2-38.48.1 libdcerpc-devel-4.4.2-38.48.1 libdcerpc-samr-devel-4.4.2-38.48.1 libdcerpc-samr0-4.4.2-38.48.1 libdcerpc-samr0-32bit-4.4.2-38.48.1 libdcerpc-samr0-64bit-4.4.2-38.48.1 libdcerpc0-4.4.2-38.48.1 libdcerpc0-32bit-4.4.2-38.48.1 libdcerpc0-64bit-4.4.2-38.48.1 libndr-devel-4.4.2-38.48.1 libndr-krb5pac-devel-4.4.2-38.48.1 libndr-krb5pac0-4.4.2-38.48.1 libndr-krb5pac0-32bit-4.4.2-38.48.1 libndr-krb5pac0-64bit-4.4.2-38.48.1 libndr-nbt-devel-4.4.2-38.48.1 libndr-nbt0-4.4.2-38.48.1 libndr-nbt0-32bit-4.4.2-38.48.1 libndr-nbt0-64bit-4.4.2-38.48.1 libndr-standard-devel-4.4.2-38.48.1 libndr-standard0-4.4.2-38.48.1 libndr-standard0-32bit-4.4.2-38.48.1 libndr-standard0-64bit-4.4.2-38.48.1 libndr0-4.4.2-38.48.1 libndr0-32bit-4.4.2-38.48.1 libndr0-64bit-4.4.2-38.48.1 libnetapi-devel-4.4.2-38.48.1 libnetapi0-4.4.2-38.48.1 libnetapi0-32bit-4.4.2-38.48.1 libnetapi0-64bit-4.4.2-38.48.1 libsamba-credentials-devel-4.4.2-38.48.1 libsamba-credentials0-4.4.2-38.48.1 libsamba-credentials0-32bit-4.4.2-38.48.1 libsamba-credentials0-64bit-4.4.2-38.48.1 libsamba-errors-devel-4.4.2-38.48.1 libsamba-errors0-4.4.2-38.48.1 libsamba-errors0-32bit-4.4.2-38.48.1 libsamba-errors0-64bit-4.4.2-38.48.1 libsamba-hostconfig-devel-4.4.2-38.48.1 libsamba-hostconfig0-4.4.2-38.48.1 libsamba-hostconfig0-32bit-4.4.2-38.48.1 libsamba-hostconfig0-64bit-4.4.2-38.48.1 libsamba-passdb-devel-4.4.2-38.48.1 libsamba-passdb0-4.4.2-38.48.1 libsamba-passdb0-32bit-4.4.2-38.48.1 libsamba-passdb0-64bit-4.4.2-38.48.1 libsamba-policy-devel-4.4.2-38.48.1 libsamba-policy0-4.4.2-38.48.1 libsamba-policy0-32bit-4.4.2-38.48.1 libsamba-policy0-64bit-4.4.2-38.48.1 libsamba-util-devel-4.4.2-38.48.1 libsamba-util0-4.4.2-38.48.1 libsamba-util0-32bit-4.4.2-38.48.1 libsamba-util0-64bit-4.4.2-38.48.1 libsamdb-devel-4.4.2-38.48.1 libsamdb0-4.4.2-38.48.1 libsamdb0-32bit-4.4.2-38.48.1 libsamdb0-64bit-4.4.2-38.48.1 libsmbclient-devel-4.4.2-38.48.1 libsmbclient0-4.4.2-38.48.1 libsmbclient0-32bit-4.4.2-38.48.1 libsmbclient0-64bit-4.4.2-38.48.1 libsmbconf-devel-4.4.2-38.48.1 libsmbconf0-4.4.2-38.48.1 libsmbconf0-32bit-4.4.2-38.48.1 libsmbconf0-64bit-4.4.2-38.48.1 libsmbldap-devel-4.4.2-38.48.1 libsmbldap0-4.4.2-38.48.1 libsmbldap0-32bit-4.4.2-38.48.1 libsmbldap0-64bit-4.4.2-38.48.1 libtevent-util-devel-4.4.2-38.48.1 libtevent-util0-4.4.2-38.48.1 libtevent-util0-32bit-4.4.2-38.48.1 libtevent-util0-64bit-4.4.2-38.48.1 libwbclient-devel-4.4.2-38.48.1 libwbclient0-4.4.2-38.48.1 libwbclient0-32bit-4.4.2-38.48.1 libwbclient0-64bit-4.4.2-38.48.1 samba-4.4.2-38.48.1 samba-client-4.4.2-38.48.1 samba-client-32bit-4.4.2-38.48.1 samba-client-64bit-4.4.2-38.48.1 samba-core-devel-4.4.2-38.48.1 samba-doc-4.4.2-38.48.1 samba-libs-4.4.2-38.48.1 samba-libs-32bit-4.4.2-38.48.1 samba-libs-64bit-4.4.2-38.48.1 samba-pidl-4.4.2-38.48.1 samba-python-4.4.2-38.48.1 samba-test-4.4.2-38.48.1 samba-winbind-4.4.2-38.48.1 samba-winbind-32bit-4.4.2-38.48.1 samba-winbind-64bit-4.4.2-38.48.1 libdcerpc-binding0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libdcerpc-binding0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libdcerpc0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libdcerpc0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr-krb5pac0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr-krb5pac0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr-nbt0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr-nbt0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr-standard0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr-standard0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libnetapi0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libnetapi0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-credentials0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-credentials0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-errors0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-errors0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-hostconfig0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-hostconfig0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-passdb0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-passdb0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-util0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-util0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamdb0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamdb0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsmbclient0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsmbclient0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsmbconf0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsmbconf0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsmbldap0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsmbldap0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtevent-util0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtevent-util0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libwbclient0-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libwbclient0-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-client-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-client-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-doc-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-libs-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-libs-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-winbind-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-winbind-32bit-4.4.2-38.48.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root. CVE-2021-44142 SUSE Linux Enterprise Server 12 SP2-BCL:libdcerpc-binding0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libdcerpc-binding0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libdcerpc0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libdcerpc0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-krb5pac0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-krb5pac0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-nbt0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-nbt0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-standard0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-standard0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libndr0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libndr0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libnetapi0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libnetapi0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-credentials0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-credentials0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-errors0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-errors0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-hostconfig0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-hostconfig0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-passdb0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-passdb0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-util0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-util0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsamdb0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsamdb0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbclient0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbclient0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbconf0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbconf0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbldap0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbldap0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtevent-util0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libtevent-util0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libwbclient0-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:libwbclient0-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:samba-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:samba-client-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:samba-client-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:samba-doc-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:samba-libs-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:samba-libs-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:samba-winbind-32bit-4.4.2-38.48.1 SUSE Linux Enterprise Server 12 SP2-BCL:samba-winbind-4.4.2-38.48.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220252-1/ https://www.suse.com/security/cve/CVE-2021-44142.html CVE-2021-44142 https://bugzilla.suse.com/1194859 SUSE Bug 1194859 https://bugzilla.suse.com/1195611 SUSE Bug 1195611 https://bugzilla.suse.com/1196455 SUSE Bug 1196455 https://bugzilla.suse.com/1199646 SUSE Bug 1199646