Oval Definition:	oval:org.opensuse.security:def:2560
Revision Date: 2020-12-02 Version: 1 Title: Security update for samba (Important) Description: This update for samba fixes the following issues: Update to samba 4.11.14 - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613). - CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994). - CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902). - lib/util: Do not install /usr/bin/test_util - smbd: don't log success as error - idmap_ad does not deal properly with a RFC4511 section 4.4.1 response; - winbind: Fix a memleak - idmap_ad: Pass tldap debug messages on to DEBUG() - lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to REPLACE_HOSTCC_SOURCE - ctdb disable/enable can fail due to race condition Family: unix Class: patch Status: Reference(s): 1047962 1049826 1053177 1065022 1082318 1083926 1083927 1099019 1102261 1109465 1110542 1111319 1112438 1112911 1113296 1114908 1115341 1116840 1117473 1118758 1119373 1119820 1119873 1120263 1120463 1120629 1120630 1120631 1121611 1122062 1122471 1123137 1123482 1123681 1123843 1123865 1123967 1124194 1124525 1124897 1125415 1125689 1127026 1127155 1127220 1130161 1131823 1132657 1132879 1133810 1134616 1135247 1135749 1136109 1137832 1137977 1138301 1138302 1138303 1138461 1138688 1140868 1141322 1141853 1145665 1146182 1146184 1149292 1149293 1149294 1149295 1149296 1149297 1149298 1149299 1149302 1149303 1149304 1149323 1150011 1153102 1173902 1173994 1177613 1178171 663358 764147 945190 965786 978193 993025 CVE-2014-3577 CVE-2015-5262 CVE-2018-16838 CVE-2018-20532 CVE-2018-20533 CVE-2018-20534 CVE-2018-20852 CVE-2018-5729 CVE-2018-5730 CVE-2019-10161 CVE-2019-10166 CVE-2019-10167 CVE-2019-11710 CVE-2019-11714 CVE-2019-11716 CVE-2019-11718 CVE-2019-11720 CVE-2019-11721 CVE-2019-11723 CVE-2019-11724 CVE-2019-11725 CVE-2019-11727 CVE-2019-11728 CVE-2019-11733 CVE-2019-11735 CVE-2019-11736 CVE-2019-11738 CVE-2019-11740 CVE-2019-11742 CVE-2019-11743 CVE-2019-11744 CVE-2019-11746 CVE-2019-11747 CVE-2019-11748 CVE-2019-11749 CVE-2019-11750 CVE-2019-11751 CVE-2019-11752 CVE-2019-11753 CVE-2019-12749 CVE-2019-12855 CVE-2019-14822 CVE-2019-17113 CVE-2019-9511 CVE-2019-9513 CVE-2019-9811 CVE-2019-9812 CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 SUSE-SU-2019:0175-1 SUSE-SU-2019:1476-1 SUSE-SU-2019:1521-1 SUSE-SU-2019:1637-1 SUSE-SU-2019:2030-1 SUSE-SU-2019:2114-1 SUSE-SU-2019:2212-1 SUSE-SU-2019:2387-1 SUSE-SU-2019:2473-1 SUSE-SU-2019:2545-1 SUSE-SU-2019:2622-1 SUSE-SU-2020:3081-1 SUSE-SU-2020:3152-1 Platform(s): SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for High Performance Computing 15 SUSE Linux Enterprise Module for High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND haproxy-1.5.4-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information gstreamer-0_10-plugins-bad-0.10.23-19.3 is installed OR gstreamer-0_10-plugins-bad-lang-0.10.23-19.3 is installed OR libgstbasecamerabinsrc-0_10-23-0.10.23-19.3 is installed OR libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-19.3 is installed OR libgstbasevideo-0_10-23-0.10.23-19.3 is installed OR libgstbasevideo-0_10-23-32bit-0.10.23-19.3 is installed OR libgstcodecparsers-0_10-23-0.10.23-19.3 is installed OR libgstphotography-0_10-23-0.10.23-19.3 is installed OR libgstphotography-0_10-23-32bit-0.10.23-19.3 is installed OR libgstsignalprocessor-0_10-23-0.10.23-19.3 is installed OR libgstsignalprocessor-0_10-23-32bit-0.10.23-19.3 is installed OR libgstvdp-0_10-23-0.10.23-19.3 is installed OR libgstvdp-0_10-23-32bit-0.10.23-19.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libarchive-3.1.2-25 is installed OR libarchive13-3.1.2-25 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information libICE6-1.0.8-12 is installed OR libICE6-32bit-1.0.8-12 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND lighttpd-1.4.35-1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND lighttpd-1.4.35-3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND python-requests-2.11.1-6.28 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 is installed AND Package Information libpacemaker-devel-1.1.18+20180430.b12c320f5-3.9 is installed OR libpacemaker3-1.1.18+20180430.b12c320f5-3.9 is installed OR pacemaker-1.1.18+20180430.b12c320f5-3.9 is installed OR pacemaker-cli-1.1.18+20180430.b12c320f5-3.9 is installed OR pacemaker-cts-1.1.18+20180430.b12c320f5-3.9 is installed OR pacemaker-remote-1.1.18+20180430.b12c320f5-3.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND Package Information libdcerpc-binding0-4.11.14+git.202.344b137b75d-4.14 is installed OR libdcerpc-binding0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libdcerpc-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libdcerpc-samr-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libdcerpc-samr0-4.11.14+git.202.344b137b75d-4.14 is installed OR libdcerpc0-4.11.14+git.202.344b137b75d-4.14 is installed OR libdcerpc0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libndr-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libndr-krb5pac-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libndr-krb5pac0-4.11.14+git.202.344b137b75d-4.14 is installed OR libndr-krb5pac0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libndr-nbt-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libndr-nbt0-4.11.14+git.202.344b137b75d-4.14 is installed OR libndr-nbt0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libndr-standard-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libndr-standard0-4.11.14+git.202.344b137b75d-4.14 is installed OR libndr-standard0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libndr0-4.11.14+git.202.344b137b75d-4.14 is installed OR libndr0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libnetapi-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libnetapi0-4.11.14+git.202.344b137b75d-4.14 is installed OR libnetapi0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-credentials-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-credentials0-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-credentials0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-errors-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-errors0-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-errors0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-hostconfig-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-hostconfig0-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-hostconfig0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-passdb-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-passdb0-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-passdb0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-policy-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-policy-python3-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-policy0-python3-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-util-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-util0-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamba-util0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamdb-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamdb0-4.11.14+git.202.344b137b75d-4.14 is installed OR libsamdb0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libsmbclient-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libsmbclient0-4.11.14+git.202.344b137b75d-4.14 is installed OR libsmbconf-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libsmbconf0-4.11.14+git.202.344b137b75d-4.14 is installed OR libsmbconf0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libsmbldap-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libsmbldap2-4.11.14+git.202.344b137b75d-4.14 is installed OR libsmbldap2-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libtevent-util-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libtevent-util0-4.11.14+git.202.344b137b75d-4.14 is installed OR libtevent-util0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR libwbclient-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR libwbclient0-4.11.14+git.202.344b137b75d-4.14 is installed OR libwbclient0-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR samba-4.11.14+git.202.344b137b75d-4.14 is installed OR samba-ceph-4.11.14+git.202.344b137b75d-4.14 is installed OR samba-client-4.11.14+git.202.344b137b75d-4.14 is installed OR samba-core-devel-4.11.14+git.202.344b137b75d-4.14 is installed OR samba-libs-4.11.14+git.202.344b137b75d-4.14 is installed OR samba-libs-32bit-4.11.14+git.202.344b137b75d-4.14 is installed OR samba-libs-python3-4.11.14+git.202.344b137b75d-4.14 is installed OR samba-python3-4.11.14+git.202.344b137b75d-4.14 is installed OR samba-winbind-4.11.14+git.202.344b137b75d-4.14 is installed OR samba-winbind-32bit-4.11.14+git.202.344b137b75d-4.14 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 is installed AND Package Information python-numpy_1_16_1-gnu-hpc-1.16.1-4.8 is installed OR python2-numpy-gnu-hpc-1.16.1-4.8 is installed OR python2-numpy-gnu-hpc-devel-1.16.1-4.8 is installed OR python3-numpy-gnu-hpc-1.16.1-4.8 is installed OR python3-numpy-gnu-hpc-devel-1.16.1-4.8 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 15 SP1 is installed AND Package Information libslurm32-17.11.13-6.23 is installed OR slurm-17.11.13-6.23 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information kernel-default-4.12.14-25.3 is installed OR reiserfs-kmp-default-4.12.14-25.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.26 is installed OR reiserfs-kmp-default-4.12.14-197.26 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-23-default-3-7 is installed OR kernel-livepatch-SLE15_Update_0-3-7 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information libnfsidmap-sss-1.16.1-3.24 is installed OR python3-ipa_hbac-1.16.1-3.24 is installed OR python3-sss-murmur-1.16.1-3.24 is installed OR python3-sss_nss_idmap-1.16.1-3.24 is installed OR sssd-1.16.1-3.24 is installed OR sssd-dbus-1.16.1-3.24 is installed OR sssd-winbind-idmap-1.16.1-3.24 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information libxslt-1.1.32-3.3 is installed OR libxslt-devel-32bit-1.1.32-3.3 is installed OR libxslt-python-1.1.32-3.3 is installed OR libxslt1-32bit-1.1.32-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND python-requests-2.3.0-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information python-2.7.14-7.17 is installed OR python-base-2.7.14-7.17 is installed OR python-curses-2.7.14-7.17 is installed OR python-devel-2.7.14-7.17 is installed OR python-gdbm-2.7.14-7.17 is installed OR python-xml-2.7.14-7.17 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information ovmf-2017+git1510945757.b2662641d5-5.11 is installed OR ovmf-tools-2017+git1510945757.b2662641d5-5.11 is installed OR qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.11 is installed OR qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.11 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libfreebl3-hmac-3.44.1-3.16 is installed OR libsoftokn3-hmac-3.44.1-3.16 is installed OR mozilla-nss-3.44.1-3.16 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND apache2-mod_wsgi-4.4.13-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information nodejs8-8.11.4-3.8 is installed OR nodejs8-devel-8.11.4-3.8 is installed OR nodejs8-docs-8.11.4-3.8 is installed OR npm8-8.11.4-3.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information apache-commons-daemon-1.0.15-4 is installed OR apache-commons-daemon-javadoc-1.0.15-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information dracut-044-87 is installed OR dracut-fips-044-87 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information libxcb-dri2-0-1.10-3 is installed OR libxcb-dri3-0-1.10-3 is installed OR libxcb-glx0-1.10-3 is installed OR libxcb-present0-1.10-3 is installed OR libxcb-randr0-1.10-3 is installed OR libxcb-render0-1.10-3 is installed OR libxcb-shape0-1.10-3 is installed OR libxcb-shm0-1.10-3 is installed OR libxcb-sync1-1.10-3 is installed OR libxcb-xf86dri0-1.10-3 is installed OR libxcb-xfixes0-1.10-3 is installed OR libxcb-xinerama0-1.10-3 is installed OR libxcb-xkb1-1.10-3 is installed OR libxcb-xv0-1.10-3 is installed OR libxcb1-1.10-3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information xorg-x11-server-7.6_1.15.2-21.1 is installed OR xorg-x11-server-sdk-7.6_1.15.2-21.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information libjavascriptcoregtk-1_0-0-2.4.8-16.2 is installed OR libwebkit2gtk-3_0-25-2.4.8-16.2 is installed OR libwebkitgtk-1_0-0-2.4.8-16.2 is installed OR libwebkitgtk-devel-2.4.8-16.2 is installed OR libwebkitgtk3-devel-2.4.8-16.2 is installed OR typelib-1_0-JavaScriptCore-1_0-2.4.8-16.2 is installed OR typelib-1_0-JavaScriptCore-3_0-2.4.8-16.2 is installed OR typelib-1_0-WebKit-1_0-2.4.8-16.2 is installed OR typelib-1_0-WebKit-3_0-2.4.8-16.2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND libvirt-client-32bit-1.2.5-13.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-25.3 is installed OR kernel-default-extra-4.12.14-25.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-60.8.0-3.46 is installed OR MozillaThunderbird-translations-common-60.8.0-3.46 is installed OR MozillaThunderbird-translations-other-60.8.0-3.46 is installed
BACK