samba-4.11.2-13.el8

Samba is an open-source implementation of the Server Message Block (SMB)
protocol and the related Common Internet File System (CIFS) protocol, which
allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba
(4.11.2).

Security Fix(es):

* samba: Combination of parameters and permissions can allow user to escape
from the share path definition (CVE-2019-10197)

* samba: smb client vulnerable to filenames containing path separators
(CVE-2019-10218)

* samba: Crash after failed character conversion at log level 3 or above
(CVE-2019-14907)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2019-10197
A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8
and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba
configuration file. An unauthenticated attacker could use this flaw to escape
the shared directory and access the contents of directories outside the share.
CVE-2019-10218
A flaw was found in the samba client, all samba versions before samba 4.11.2,
4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client
with separators. This could allow the client to access files and folders outside
of the SMB network pathnames. An attacker could use this vulnerability to create
files outside of the current working directory using the privileges of the
client user.
CVE-2019-14907
All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before
4.11.5 have an issue where if it is set with "log level = 3" (or above) then the
string obtained from the client, after a failed character conversion, is
printed. Such strings can be provided during the NTLMSSP authentication
exchange. In the Samba AD DC in particular, this may cause a long-lived
process(such as the RPC server) to terminate. (In the file server case, the most
likely target, smbd, operates as process-per-client and so a crash there is
harmless).