[security bulletin] HPESBNS03755 rev.1 - HPE NonStop Server using Samba, Multiple Remote Vulnerabilities

LS0tLS1CRUdJTiBQR1AgU0lHTkVEIE1FU1NBR0UtLS0tLQ0KSGFzaDogU0hBMjU2DQoNCk5vdGU6
IHRoZSBjdXJyZW50IHZlcnNpb24gb2YgdGhlIGZvbGxvd2luZyBkb2N1bWVudCBpcyBhdmFpbGFi
bGUgaGVyZToNCmh0dHBzOi8vaDIwNTY0Lnd3dzIuaHBlLmNvbS9ocHNjL2RvYy9wdWJsaWMvZGlz
cGxheT9kb2NJZD1lbXJfbmEtaHBlc2JuczAzNzU1ZW5fdXMNCg0KU1VQUE9SVCBDT01NVU5JQ0FU
SU9OIC0gU0VDVVJJVFkgQlVMTEVUSU4NCg0KRG9jdW1lbnQgSUQ6IGhwZXNibnMwMzc1NWVuX3Vz
DQpWZXJzaW9uOiAxDQoNCkhQRVNCTlMwMzc1NSByZXYuMSAtIEhQRSBOb25TdG9wIFNlcnZlciB1
c2luZyBTYW1iYSwgTXVsdGlwbGUgUmVtb3RlIFZ1bG5lcmFiaWxpdGllcw0KDQpOT1RJQ0U6IFRo
ZSBpbmZvcm1hdGlvbiBpbiB0aGlzIFNlY3VyaXR5IEJ1bGxldGluIHNob3VsZCBiZSBhY3RlZCB1
cG9uIGFzIHNvb24gYXMgcG9zc2libGUuDQoNClJlbGVhc2UgRGF0ZTogMjAxNy0wNi0wNw0KTGFz
dCBVcGRhdGVkOiAyMDE3LTA2LTA3DQoNClBvdGVudGlhbCBTZWN1cml0eSBJbXBhY3Q6IFJlbW90
ZTogQWNjZXNzIFJlc3RyaWN0aW9uIEJ5cGFzcywgQXJiaXRyYXJ5IENvZGUgRXhlY3V0aW9uDQoN
ClNvdXJjZTogSGV3bGV0dCBQYWNrYXJkIEVudGVycHJpc2UsIFByb2R1Y3QgU2VjdXJpdHkgUmVz
cG9uc2UgVGVhbQ0KDQpWVUxORVJBQklMSVRZIFNVTU1BUlkNCkhQRSBOb25TdG9wIFNlcnZlciB1
c2luZyBTYW1iYSBpcyB2dWxuZXJhYmxlIHRvIHJlbW90ZSBjb2RlIGV4ZWN1dGlvbiBhbmQgcmVt
b3RlIGFjY2VzcyByZXN0cmljdGlvbiBieXBhc3MuDQoNClJlZmVyZW5jZXM6DQoNCiAgLSBDVkUt
MjAxNy03NDk0IC0gUmVtb3RlIENvZGUgRXhlY3V0aW9uDQogIC0gQ1ZFLTIwMTctMjYxOSAtIFJl
bW90ZSBBY2Nlc3MgUmVzdHJpY3Rpb24gQnlwYXNzDQoNClNVUFBPUlRFRCBTT0ZUV0FSRSBWRVJT
SU9OUyo6IE9OTFkgaW1wYWN0ZWQgdmVyc2lvbnMgYXJlIGxpc3RlZC4NCg0KICAtIFNhbWJhIG9u
IE5vblN0b3AgVDEyMDFMMDEgdGhyb3VnaCBUMTIwMUwwMV5BQUwsIFQxMjAxSDAxIHRocm91Z2gg
VDEyMDFIMDFeQUFNDQoNCkJBQ0tHUk9VTkQNCg0KICBDVlNTIEJhc2UgTWV0cmljcw0KICA9PT09
PT09PT09PT09PT09PQ0KICBSZWZlcmVuY2UsIENWU1MgVjMgU2NvcmUvVmVjdG9yLCBDVlNTIFYy
IFNjb3JlL1ZlY3Rvcg0KDQogICAgQ1ZFLTIwMTctMjYxOQ0KICAgICAgNS45IENWU1M6My4wL0FW
Ok4vQUM6SC9QUjpML1VJOlIvUzpVL0M6SC9JOkwvQTpMDQogICAgICA1LjIgKEFWOkwvQUM6SC9B
dTpOL0M6Qy9JOlAvQTpQKQ0KDQogICAgQ1ZFLTIwMTctNzQ5NA0KICAgICAgNy41IENWU1M6My4w
L0FWOk4vQUM6SC9QUjpML1VJOk4vUzpVL0M6SC9JOkgvQTpIDQogICAgICA3LjIgKEFWOkwvQUM6
TC9BdTpOL0M6Qy9JOkMvQTpDKQ0KDQogICAgSW5mb3JtYXRpb24gb24gQ1ZTUyBpcyBkb2N1bWVu
dGVkIGluDQogICAgSFBFIEN1c3RvbWVyIE5vdGljZSBIUFNOLTIwMDgtMDAyIGhlcmU6DQoNCmh0
dHBzOi8vaDIwNTY0Lnd3dzIuaHBlLmNvbS9ocHNjL2RvYy9wdWJsaWMvZGlzcGxheT9kb2NJZD1l
bXJfbmEtYzAxMzQ1NDk5DQoNClJFU09MVVRJT04NCg0KVGhlcmUgYXJlIG5vIHBhdGNoZXMgYXZh
aWxhYmxlIGF0IHRoaXMgdGltZSBmb3IgdGhlc2UgdnVsbmVyYWJpbGl0aWVzLg0KSGV3bGV0dCBQ
YWNrYXJkIEVudGVycHJpc2Ugd2lsbCBwcm92aWRlIGZpeGVzIGluIFNhbWJhIFNQUnMgVDEyMDFM
MDFeQUFPIGFuZCBUMTIwMUgwMV5BQU4uDQoNCkN1c3RvbWVycyBjYW4gYXBwbHkgdGhlIGZvbGxv
d2luZyB3b3JrYXJvdW5kcyBmb3IgZWFjaCB2dWxuZXJhYmlsaXR5IGluDQpTYW1iYToNCg0KV29y
a2Fyb3VuZCBmb3IgQ1ZFLTIwMTctNzQ5NDoNCg0KICArIEFkZCB0aGUgcGFyYW1ldGVyOiBgbnQg
cGlwZSBzdXBwb3J0ID0gbm9gIHRvIHRoZSBzbWIuY29uZiBbZ2xvYmFsXSBzZWN0aW9uDQogICsg
UmVzdGFydCB0aGUgU2FtYmEgZGFlbW9uIChzbWJkKS4gIA0KICANCldvcmthcm91bmQgZm9yIENW
RS0yMDE3LTI2MTk6DQoNCiAgKyBBZGQgdGhlIHBhcmFtZXRlcjogYHVuaXggZXh0ZW5zaW9ucyA9
IG5vYCB0byB0aGUgc21iLmNvbmYgW2dsb2JhbF0gc2VjdGlvbg0KICArIFJlc3RhcnQgdGhlIFNh
bWJhIGRhZW1vbiAoc21iZCkuICANCg0KU2VlIE5vblN0b3AgSG90c3R1ZmYgSFMwMzM1NyBmb3Ig
YWRkaXRpb25hbCBpbmZvcm1hdGlvbi4gDQoNCg0KICoqTm90ZSoqOiBGb3IgZnVydGhlciBhc3Np
c3RhbmNlIHBsZWFzZSBjb250YWN0IE5vblN0b3AgdGVjaG5pY2FsIHN1cHBvcnQuDQoNCkhJU1RP
UlkNClZlcnNpb246MSAocmV2LjEpIC0gOCBKdW5lIDIwMTcgSW5pdGlhbCByZWxlYXNlDQoNClRo
aXJkIFBhcnR5IFNlY3VyaXR5IFBhdGNoZXM6IFRoaXJkIHBhcnR5IHNlY3VyaXR5IHBhdGNoZXMg
dGhhdCBhcmUgdG8gYmUgaW5zdGFsbGVkIG9uIHN5c3RlbXMgcnVubmluZyBIZXdsZXR0IFBhY2th
cmQgRW50ZXJwcmlzZSAoSFBFKSBzb2Z0d2FyZSBwcm9kdWN0cyBzaG91bGQgYmUgYXBwbGllZCBp
biBhY2NvcmRhbmNlIHdpdGggdGhlIGN1c3RvbWVyJ3MgcGF0Y2ggbWFuYWdlbWVudCBwb2xpY3ku
DQoNClN1cHBvcnQ6IEZvciBpc3N1ZXMgYWJvdXQgaW1wbGVtZW50aW5nIHRoZSByZWNvbW1lbmRh
dGlvbnMgb2YgdGhpcyBTZWN1cml0eSBCdWxsZXRpbiwgY29udGFjdCBub3JtYWwgSFBFIFNlcnZp
Y2VzIHN1cHBvcnQgY2hhbm5lbC4gRm9yIG90aGVyIGlzc3VlcyBhYm91dCB0aGUgY29udGVudCBv
ZiB0aGlzIFNlY3VyaXR5IEJ1bGxldGluLCBzZW5kIGUtbWFpbCB0byBzZWN1cml0eS1hbGVydEBo
cGUuY29tLg0KDQpSZXBvcnQ6IFRvIHJlcG9ydCBhIHBvdGVudGlhbCBzZWN1cml0eSB2dWxuZXJh
YmlsaXR5IGZvciBhbnkgSFBFIHN1cHBvcnRlZA0KcHJvZHVjdDoNCiAgV2ViIGZvcm06IGh0dHBz
Oi8vd3d3LmhwZS5jb20vaW5mby9yZXBvcnQtc2VjdXJpdHktdnVsbmVyYWJpbGl0eQ0KICBFbWFp
bDogc2VjdXJpdHktYWxlcnRAaHBlLmNvbQ0KDQpTdWJzY3JpYmU6IFRvIGluaXRpYXRlIGEgc3Vi
c2NyaXB0aW9uIHRvIHJlY2VpdmUgZnV0dXJlIEhQRSBTZWN1cml0eSBCdWxsZXRpbiBhbGVydHMg
dmlhIEVtYWlsOiBodHRwOi8vd3d3LmhwZS5jb20vc3VwcG9ydC9TdWJzY3JpYmVyX0Nob2ljZQ0K
DQpTZWN1cml0eSBCdWxsZXRpbiBBcmNoaXZlOiBBIGxpc3Qgb2YgcmVjZW50bHkgcmVsZWFzZWQg
U2VjdXJpdHkgQnVsbGV0aW5zIGlzIGF2YWlsYWJsZSBoZXJlOiBodHRwOi8vd3d3LmhwZS5jb20v
c3VwcG9ydC9TZWN1cml0eV9CdWxsZXRpbl9BcmNoaXZlDQoNClNvZnR3YXJlIFByb2R1Y3QgQ2F0
ZWdvcnk6IFRoZSBTb2Z0d2FyZSBQcm9kdWN0IENhdGVnb3J5IGlzIHJlcHJlc2VudGVkIGluIHRo
ZSB0aXRsZSBieSB0aGUgdHdvIGNoYXJhY3RlcnMgZm9sbG93aW5nIEhQU0IuDQoNCjNDID0gM0NP
TQ0KM1AgPSAzcmQgUGFydHkgU29mdHdhcmUNCkdOID0gSFBFIEdlbmVyYWwgU29mdHdhcmUNCkhG
ID0gSFBFIEhhcmR3YXJlIGFuZCBGaXJtd2FyZQ0KTVUgPSBNdWx0aS1QbGF0Zm9ybSBTb2Z0d2Fy
ZQ0KTlMgPSBOb25TdG9wIFNlcnZlcnMNCk9WID0gT3BlblZNUw0KUFYgPSBQcm9DdXJ2ZQ0KU1Qg
PSBTdG9yYWdlIFNvZnR3YXJlDQpVWCA9IEhQLVVYDQoNCkNvcHlyaWdodCAyMDE2IEhld2xldHQg
UGFja2FyZCBFbnRlcnByaXNlDQoNCkhld2xldHQgUGFja2FyZCBFbnRlcnByaXNlIHNoYWxsIG5v
dCBiZSBsaWFibGUgZm9yIHRlY2huaWNhbCBvciBlZGl0b3JpYWwgZXJyb3JzIG9yIG9taXNzaW9u
cyBjb250YWluZWQgaGVyZWluLiBUaGUgaW5mb3JtYXRpb24gcHJvdmlkZWQgaXMgcHJvdmlkZWQg
ImFzIGlzIiB3aXRob3V0IHdhcnJhbnR5IG9mIGFueSBraW5kLiBUbyB0aGUgZXh0ZW50IHBlcm1p
dHRlZCBieSBsYXcsIG5laXRoZXIgSFAgb3IgaXRzIGFmZmlsaWF0ZXMsIHN1YmNvbnRyYWN0b3Jz
IG9yIHN1cHBsaWVycyB3aWxsIGJlIGxpYWJsZSBmb3IgaW5jaWRlbnRhbCxzcGVjaWFsIG9yIGNv
bnNlcXVlbnRpYWwgZGFtYWdlcyBpbmNsdWRpbmcgZG93bnRpbWUgY29zdDsgbG9zdCBwcm9maXRz
OyBkYW1hZ2VzIHJlbGF0aW5nIHRvIHRoZSBwcm9jdXJlbWVudCBvZiBzdWJzdGl0dXRlIHByb2R1
Y3RzIG9yIHNlcnZpY2VzOyBvciBkYW1hZ2VzIGZvciBsb3NzIG9mIGRhdGEsIG9yIHNvZnR3YXJl
IHJlc3RvcmF0aW9uLiBUaGUgaW5mb3JtYXRpb24gaW4gdGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0
IHRvIGNoYW5nZSB3aXRob3V0IG5vdGljZS4gSGV3bGV0dCBQYWNrYXJkIEVudGVycHJpc2UgYW5k
IHRoZSBuYW1lcyBvZiBIZXdsZXR0IFBhY2thcmQgRW50ZXJwcmlzZSBwcm9kdWN0cyByZWZlcmVu
Y2VkIGhlcmVpbiBhcmUgdHJhZGVtYXJrcyBvZiBIZXdsZXR0IFBhY2thcmQgRW50ZXJwcmlzZSBp
biB0aGUgVW5pdGVkIFN0YXRlcyBhbmQgb3RoZXIgY291bnRyaWVzLiBPdGhlciBwcm9kdWN0IGFu
ZCBjb21wYW55IG5hbWVzIG1lbnRpb25lZCBoZXJlaW4gbWF5IGJlIHRyYWRlbWFya3Mgb2YgdGhl
aXIgcmVzcGVjdGl2ZSBvd25lcnMuDQotLS0tLUJFR0lOIFBHUCBTSUdOQVRVUkUtLS0tLQ0KVmVy
c2lvbjogR251UEcgdjENCg0KaVFFY0JBRUJDQUFHQlFKWk9HaDJBQW9KRUxYaEF4dDdTWmFpQlNV
SUFLK1RJWEV1OStpM0U4Snh4VXU2THRsVA0KZEhSUnAwQVZEK0NFZUVieXpBdVNXWVBNa05JeHBN
R3dWQ2I4Mlc5MU9CNS80NnFrOW5HdEJMMGxxYWFicVFUcQ0Kd0I1RVNLQk5wL053UlpjRmh5cFlJ
ZkdlaVZLL2ZzQ2kzMWIzbXhSVjJabzhGc3NZcUdTelN3bGx5L0EyVkVkSw0KWHRhR0FJTHdlb2RH
WXVLeG1VK0l0MW9xY1MrR0tEVHltK2N5WURiRFlvZFpsQk1vTTRLazQ5MUVPUldZOEtHcQ0KMzJJ
VGZ4VjV4MlZaSDA4cENzeHBQTnU5dTluTk9Sd3ArdGllRXhySHJhTWxFQTNWYWh3UjRyR2xJNEZT
WVdScw0KVkh0YTlZTVFFOFU1cGJlL0lnVENUUGpVTlJDczZXVzBDVDdCUmwxL2JQczh5Q2FGY3di
eDF0QTFGU3NQZ1QwPQ0KPWZzbXANCi0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQ0K