Alerts This Week
Warning Icon 1 684
Alerts This Week
Warning Icon 1 684

SUSE: 2017:3086-1 Important: Samba Memory Leak Critical: Memory Leak

suse
Calendar Grey November 24, 2017
Dist Suse Esm H88
A vital patch for Samba resolves significant vulnerabilities in SUSE environments. This crucial update enhances safety and ensures system reliability.
An update that solves two vulnerabilities and has one An update that solves two vulnerabilities and has one An update that solves two vulnerabilities and has one errata is now avai...

Summary

This update for samba fixes the following issues: Security issues fixed: - CVE-2017-14746: Fixed a use-after-free vulnerability that could be used to crash smbd or potentially execute code (bsc#1060427). - CVE-2017-15275: Fixed a server heap memory information leak (bsc#1063008). Non-security issues fixed: - Update 'winbind expand groups' doc in smb.conf man page; (bsc#1027593). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 6: zypper in -t patch SUSE-OpenStack-Cloud-6-2017-1902=1 - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2017-1902=1 - SUSE Linux Enterprise Server for SAP 12-SP1:

References

#1027593 #1060427 #1063008

Cross- CVE-2017-14746 CVE-2017-15275

Affected Products:

SUSE OpenStack Cloud 6

SUSE Linux Enterprise Software Development Kit 12-SP2

SUSE Linux Enterprise Server for SAP 12-SP1

SUSE Linux Enterprise Server for Raspberry Pi 12-SP2

SUSE Linux Enterprise Server 12-SP2

SUSE Linux Enterprise Server 12-SP1-LTSS

SUSE Linux Enterprise High Availability 12-SP1

SUSE Linux Enterprise Desktop 12-SP2

https://www.suse.com/security/cve/CVE-2017-14746.html

https://www.suse.com/security/cve/CVE-2017-15275.html

https://bugzilla.suse.com/1027593

https://bugzilla.suse.com/1060427

https://bugzilla.suse.com/1063008

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:3086-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here