Recommended update for samba

Announcement ID:	SUSE-RU-2023:4525-1
Rating:	moderate
References:	bsc#1213607 bsc#1213826 bsc#1215212
Affected Products:	Basesystem Module 15-SP5 openSUSE Leap 15.5 SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Availability Extension 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Real Time 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5

An update that has three fixes can now be installed.

Description:

This update for samba fixes the following issues:

• Update to samba 4.17.12
• Some filenames can cause assert to fail in openat_pathref_fsp_nosymlink
• reply_sesssetup_and_X() can dereference uninitialized tmp pointer
• Missing return in reply_exit_done()
• TREE_CONNECT without SETUP causes smbd to use uninitialized pointer
• Improve GetNChanges to address synchronization tool looping during the initial user sync phase
• Samba replication logs show (null) DN
• Renaming results in NT_STATUS_SHARING_VIOLATION if previously attempted to remove the destination
• Spotlight results return wrong date in result list
• Delays at reconnect with smb2_validate_sequence_number: bad message_id 2
• samba-tool ntacl get segfault if aio_pthread appended
• DCERPC_PKT_CO_CANCEL and DCERPC_PKT_ORPHANED can't be parsed
• File doesn't show when user doesn't have permission if aio_pthread is loaded
• net ads lookup with unspecified realm fails
• Regression DFS not working with widelinks = true (bsc#1213607);
• ctdb_killtcp fails to work with --enable-pcap and libpcap 1.9.1
• mdssvc: Do an early talloc_free() in _mdssvc_open()
• Windows client join fails if a second container CN=System exists somewhere
• Fix crossing automounter mount points (bsc#1215212)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Micro 5.5
  zypper in -t patch SUSE-SLE-Micro-5.5-2023-4525=1
• Basesystem Module 15-SP5
  zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4525=1
• SUSE Linux Enterprise High Availability Extension 15 SP5
  zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2023-4525=1
• openSUSE Leap 15.5
  zypper in -t patch SUSE-2023-4525=1 openSUSE-SLE-15.5-2023-4525=1

Package List:

• SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64)
  • samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1
• Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64)
  • libsamba-policy-python3-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-gpupdate-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-tool-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • libsamba-policy0-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • libsamba-policy-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-ldb-ldap-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-ldb-ldap-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • libsamba-policy0-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-4.17.12+git.427.2619dc0bed-150500.3.14.1
• Basesystem Module 15-SP5 (aarch64 x86_64)
  • samba-ceph-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-ceph-4.17.12+git.427.2619dc0bed-150500.3.14.1
• Basesystem Module 15-SP5 (x86_64)
  • samba-client-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
• SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64)
  • ctdb-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • ctdb-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
• openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)
  • libsamba-policy-python3-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • ctdb-pcp-pmda-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-gpupdate-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-tool-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • libsamba-policy0-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • ctdb-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • libsamba-policy-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-devel-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-debugsource-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • ctdb-pcp-pmda-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • ctdb-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-test-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-ldb-ldap-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-ldb-ldap-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-test-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-libs-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • libsamba-policy0-python3-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-python3-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-4.17.12+git.427.2619dc0bed-150500.3.14.1
• openSUSE Leap 15.5 (x86_64)
  • samba-client-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • libsamba-policy0-python3-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-python3-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-python3-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-libs-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • libsamba-policy0-python3-32bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-devel-32bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
• openSUSE Leap 15.5 (noarch)
  • samba-doc-4.17.12+git.427.2619dc0bed-150500.3.14.1
• openSUSE Leap 15.5 (aarch64 x86_64)
  • samba-ceph-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-ceph-4.17.12+git.427.2619dc0bed-150500.3.14.1
• openSUSE Leap 15.5 (aarch64_ilp32)
  • samba-libs-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-libs-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-libs-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-libs-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-python3-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-client-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-devel-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • libsamba-policy0-python3-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-libs-python3-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • samba-winbind-libs-64bit-debuginfo-4.17.12+git.427.2619dc0bed-150500.3.14.1
  • libsamba-policy0-python3-64bit-4.17.12+git.427.2619dc0bed-150500.3.14.1

References:

• https://bugzilla.suse.com/show_bug.cgi?id=1213607
• https://bugzilla.suse.com/show_bug.cgi?id=1213826
• https://bugzilla.suse.com/show_bug.cgi?id=1215212