Oval Definition:oval:org.opensuse.security:def:3787
Revision Date:2022-08-03Version:1
Title:Security update for ldb, samba (Important)
Description:

This update for ldb, samba fixes the following issues:

- CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490). - CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request (bsc#1201492). - CVE-2022-2031: Fixed AD restrictions bypass associated with changing passwords (bsc#1201495). - CVE-2022-32742: Fixed a memory leak in SMB1 (bsc#1201496). - CVE-2022-32744: Fixed an arbitrary password change request for any AD user (bsc#1201493).

The following non-security bug were fixed:

ldb was updated to version 2.4.3:

+ Fix build problems, waf produces incorrect names for python extensions; (bso#15071);

samba was updated to 4.15.8:

Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);

- Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556).
Family:unixClass:patch
Status:Reference(s):1058115
1103203
1112178
1127838
1136666
1141132
1151867
1156402
1159639
1159913
1159922
1159923
1159924
1159927
1160467
1160468
1162501
1164903
1165548
1165631
1171558
1171746
1172140
1172437
1173060
1173100
1173659
1173661
1173663
1173869
1173942
1173963
1174186
1174247
1175691
1175992
1176012
1176031
1176069
1176072
1176382
1196224
1198255
1199247
1199734
1200556
1200964
1201490
1201492
1201493
1201495
1201496
CVE-2018-1000199
CVE-2019-0155
CVE-2019-0804
CVE-2019-11045
CVE-2019-11046
CVE-2019-11047
CVE-2019-11050
CVE-2019-13508
CVE-2019-14895
CVE-2019-14896
CVE-2019-14897
CVE-2019-14901
CVE-2019-15666
CVE-2019-16707
CVE-2019-16746
CVE-2019-19447
CVE-2019-20446
CVE-2019-2201
CVE-2019-5108
CVE-2019-9458
CVE-2020-10757
CVE-2020-11668
CVE-2020-14331
CVE-2020-14381
CVE-2020-14386
CVE-2020-14386
CVE-2020-15780
CVE-2020-1749
CVE-2020-24394
CVE-2020-24553
CVE-2020-25212
CVE-2022-2031
CVE-2022-32742
CVE-2022-32744
CVE-2022-32745
CVE-2022-32746
SUSE-SU-2019:2971-1
SUSE-SU-2019:3393-1
SUSE-SU-2020:0101-1
SUSE-SU-2020:0629-2
SUSE-SU-2020:1213-1
SUSE-SU-2020:1417-2
SUSE-SU-2020:2505-1
SUSE-SU-2020:2579-1
SUSE-SU-2022:2659-1
Platform(s):SUSE Linux Enterprise Build System Kit 12 SP1
SUSE Linux Enterprise Build System Kit 12 SP2
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise for SAP 12
SUSE Linux Enterprise for SAP 12 SP1
SUSE Linux Enterprise High Availability 12 SP2
SUSE Linux Enterprise High Availability 12 SP3
SUSE Linux Enterprise High Availability 12 SP4
SUSE Linux Enterprise High Availability 15
SUSE Linux Enterprise High Availability 15 SP1
SUSE Linux Enterprise High Availability 15 SP4
SUSE Linux Enterprise High Performance Computing 15 SP4
SUSE Linux Enterprise High Performance Computing 15-ESPOS
SUSE Linux Enterprise High Performance Computing 15-LTSS
SUSE Linux Enterprise Live Patching 12
SUSE Linux Enterprise Module for additional PackageHub packages 15
SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1
SUSE Linux Enterprise Module for Containers 12
SUSE Linux Enterprise Module for Legacy Software 12
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Public Cloud 12
SUSE Linux Enterprise Module for Public Cloud 15
SUSE Linux Enterprise Module for Public Cloud 15 SP1
SUSE Linux Enterprise Module for Public Cloud 15 SP2
SUSE Linux Enterprise Module for Python2 packages 15 SP1
SUSE Linux Enterprise Module for Realtime packages 15 SP1
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Module for Server Applications 15 SP2
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Module for Web Scripting 15 SP1
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3-LTSS
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server for SAP Applications 15 SP4
SUSE Linux Enterprise Server for VMWare 11 SP3
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP2
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 12 SP1
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE Manager Proxy 4.3
SUSE Manager Retail Branch Server 4.3
SUSE Manager Server 4.3
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 SP1 is installed
  • AND Package Information
  • libpoppler-cpp0-0.24.4-12 is installed
  • OR poppler-0.24.4-12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 SP2 is installed
  • AND Package Information
  • ghostscript-mini-9.15-17.1 is installed
  • OR ghostscript-mini-devel-9.15-17.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND Package Information
  • ImageMagick-6.4.3.6-7.26.1 is installed
  • OR libMagick++1-6.4.3.6-7.26.1 is installed
  • OR libMagickCore1-6.4.3.6-7.26.1 is installed
  • OR libMagickCore1-32bit-6.4.3.6-7.26.1 is installed
  • OR libMagickWand1-6.4.3.6-7.26.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • dbus-1-1.8.8-1 is installed
  • OR dbus-1-x11-1.8.8-1 is installed
  • OR libdbus-1-3-1.8.8-1 is installed
  • OR libdbus-1-3-32bit-1.8.8-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • accountsservice-0.6.35-3 is installed
  • OR accountsservice-lang-0.6.35-3 is installed
  • OR libaccountsservice0-0.6.35-3 is installed
  • OR typelib-1_0-AccountsService-1_0-0.6.35-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • aaa_base-13.2+git20140911.61c1681-28 is installed
  • OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • libecpg6-9.6.3-2 is installed
  • OR libpq5-9.6.3-2 is installed
  • OR libpq5-32bit-9.6.3-2 is installed
  • OR postgresql96-9.6.3-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • at-3.1.14-8.6 is installed
  • OR libQtWebKit4-4.8.7+2.3.4-4.7 is installed
  • OR libQtWebKit4-32bit-4.8.7+2.3.4-4.7 is installed
  • OR libbonobo-2.32.1-16 is installed
  • OR libbonobo-32bit-2.32.1-16 is installed
  • OR libbonobo-lang-2.32.1-16 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise for SAP 12 is installed
  • AND Package Information
  • kgraft-patch-3_12_60-52_54-default-2-2.2 is installed
  • OR kgraft-patch-3_12_60-52_54-xen-2-2.2 is installed
  • OR kgraft-patch-SLE12_Update_15-2-2.2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise for SAP 12 SP1 is installed
  • AND Package Information
  • compat-openssl098-0.9.8j-94.1 is installed
  • OR libopenssl0_9_8-0.9.8j-94.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP2 is installed
  • AND Package Information
  • cluster-md-kmp-default-4.4.59-92.24 is installed
  • OR cluster-network-kmp-default-4.4.59-92.24 is installed
  • OR dlm-kmp-default-4.4.59-92.24 is installed
  • OR gfs2-kmp-default-4.4.59-92.24 is installed
  • OR kernel-default-4.4.59-92.24 is installed
  • OR ocfs2-kmp-default-4.4.59-92.24 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP3 is installed
  • AND Package Information
  • drbd-9.0.8+git.c8bc3670-3.5 is installed
  • OR drbd-kmp-default-9.0.8+git.c8bc3670_k4.4.131_94.29-3.5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP4 is installed
  • AND fence-agents-4.4.0+git.1558595666.5f79f9e9-3.5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability 15 is installed
  • AND Package Information
  • cluster-md-kmp-default-4.12.14-25.19 is installed
  • OR dlm-kmp-default-4.12.14-25.19 is installed
  • OR gfs2-kmp-default-4.12.14-25.19 is installed
  • OR kernel-default-4.12.14-25.19 is installed
  • OR ocfs2-kmp-default-4.12.14-25.19 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise High Availability 15 SP1 is installed
  • AND Package Information
  • cluster-md-kmp-default-4.12.14-197.26 is installed
  • OR dlm-kmp-default-4.12.14-197.26 is installed
  • OR gfs2-kmp-default-4.12.14-197.26 is installed
  • OR kernel-default-4.12.14-197.26 is installed
  • OR ocfs2-kmp-default-4.12.14-197.26 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Availability 15 SP4 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed
  • OR SUSE Linux Enterprise Server 15 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed
  • OR SUSE Manager Proxy 4.3 is installed
  • OR SUSE Manager Retail Branch Server 4.3 is installed
  • OR SUSE Manager Server 4.3 is installed
  • AND ctdb-4.15.8+git.500.d5910280cc7-150400.3.11.1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed
  • AND
  • rmt-server-2.5.7-3.31 is installed
  • OR rmt-server-config-2.5.7-3.31 is installed
  • OR Package Information
  • SUSE Linux Enterprise High Performance Computing 15-LTSS is installed
  • AND
  • rmt-server-2.5.7-3.31 is installed
  • OR rmt-server-config-2.5.7-3.31 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Live Patching 12 is installed
  • AND Package Information
  • kgraft-patch-3_12_43-52_6-default-3-2 is installed
  • OR kgraft-patch-3_12_43-52_6-xen-3-2 is installed
  • OR kgraft-patch-SLE12_Update_5-3-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
  • AND libjpeg-turbo-1.5.3-5.12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed
  • AND Package Information
  • freetds-1.1.36-3.3 is installed
  • OR libsybdb5-1.1.36-3.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Containers 12 is installed
  • AND Package Information
  • ruby2.1-rubygem-passenger-5.0.18-6.1 is installed
  • OR rubygem-passenger-5.0.18-6.1 is installed
  • OR rubygem-passenger-apache2-5.0.18-6.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 12 is installed
  • AND Package Information
  • cups154-1.5.4-2 is installed
  • OR cups154-client-1.5.4-2 is installed
  • OR cups154-filters-1.5.4-2 is installed
  • OR cups154-libs-1.5.4-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-197_10-default-8-2 is installed
  • OR kernel-livepatch-SLE15-SP1_Update_3-8-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • go1.14-1.14.9-1.18 is installed
  • OR go1.14-doc-1.14.9-1.18 is installed
  • OR go1.14-race-1.14.9-1.18 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 12 is installed
  • AND Package Information
  • kernel-ec2-3.12.32-33.1 is installed
  • OR kernel-ec2-devel-3.12.32-33.1 is installed
  • OR kernel-ec2-extra-3.12.32-33.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 15 is installed
  • AND python-azure-agent-2.2.45-7.9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
  • AND Package Information
  • rmt-server-2.5.7-3.15 is installed
  • OR rmt-server-pubcloud-2.5.7-3.15 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 15 SP2 is installed
  • AND Package Information
  • kernel-azure-5.3.18-18.12 is installed
  • OR kernel-azure-devel-5.3.18-18.12 is installed
  • OR kernel-devel-azure-5.3.18-18.12 is installed
  • OR kernel-source-azure-5.3.18-18.12 is installed
  • OR kernel-syms-azure-5.3.18-18.12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed
  • AND Package Information
  • python-libxml2-python-2.9.7-3.19 is installed
  • OR python2-libxml2-python-2.9.7-3.19 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Realtime packages 15 SP1 is installed
  • AND Package Information
  • cluster-md-kmp-rt-4.12.14-14.28 is installed
  • OR dlm-kmp-rt-4.12.14-14.28 is installed
  • OR gfs2-kmp-rt-4.12.14-14.28 is installed
  • OR kernel-devel-rt-4.12.14-14.28 is installed
  • OR kernel-rt-4.12.14-14.28 is installed
  • OR kernel-rt-base-4.12.14-14.28 is installed
  • OR kernel-rt-devel-4.12.14-14.28 is installed
  • OR kernel-rt_debug-4.12.14-14.28 is installed
  • OR kernel-rt_debug-devel-4.12.14-14.28 is installed
  • OR kernel-source-rt-4.12.14-14.28 is installed
  • OR kernel-syms-rt-4.12.14-14.28 is installed
  • OR ocfs2-kmp-rt-4.12.14-14.28 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND Package Information
  • xen-4.10.1_08-3.6 is installed
  • OR xen-devel-4.10.1_08-3.6 is installed
  • OR xen-tools-4.10.1_08-3.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND Package Information
  • util-linux-systemd-2.33.1-4.5 is installed
  • OR uuidd-2.33.1-4.5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
  • AND Package Information
  • grub2-2.04-9.15 is installed
  • OR grub2-x86_64-xen-2.04-9.15 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 12 is installed
  • AND Package Information
  • libpython3_4m1_0-3.4.5-17.1 is installed
  • OR python3-3.4.5-17.1 is installed
  • OR python3-base-3.4.5-17.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 is installed
  • AND Package Information
  • nodejs8-8.11.4-3.8 is installed
  • OR nodejs8-devel-8.11.4-3.8 is installed
  • OR nodejs8-docs-8.11.4-3.8 is installed
  • OR npm8-8.11.4-3.8 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed
  • AND Package Information
  • nodejs10-10.16.0-1.9 is installed
  • OR nodejs10-devel-10.16.0-1.9 is installed
  • OR nodejs10-docs-10.16.0-1.9 is installed
  • OR npm10-10.16.0-1.9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND Package Information
  • expat-2.0.1-88.26.1 is installed
  • OR libexpat1-2.0.1-88.26.1 is installed
  • OR libexpat1-32bit-2.0.1-88.26.1 is installed
  • OR libexpat1-x86-2.0.1-88.26.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND Package Information
  • file-4.24-43.23.1 is installed
  • OR file-32bit-4.24-43.23.1 is installed
  • OR file-x86-4.24-43.23.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND Package Information
  • alsa-1.0.27.2-11 is installed
  • OR alsa-docs-1.0.27.2-11 is installed
  • OR libasound2-1.0.27.2-11 is installed
  • OR libasound2-32bit-1.0.27.2-11 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • DirectFB-1.7.1-4 is installed
  • OR lib++dfb-1_7-1-1.7.1-4 is installed
  • OR libdirectfb-1_7-1-1.7.1-4 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • hplip-3.16.11-1 is installed
  • OR hplip-hpijs-3.16.11-1 is installed
  • OR hplip-sane-3.16.11-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • aaa_base-13.2+git20140911.61c1681-38.8 is installed
  • OR aaa_base-extras-13.2+git20140911.61c1681-38.8 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND permissions-20180125-3.21 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
  • AND Package Information
  • jasper-1.900.14-181.1 is installed
  • OR libjasper1-1.900.14-181.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • rmt-server-2.5.2-3.26 is installed
  • OR rmt-server-config-2.5.2-3.26 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 is installed
  • AND Package Information
  • python-base-2.7.7-9.3 is installed
  • OR python-devel-2.7.7-9.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
  • AND libtasn1-devel-3.7-4 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
  • AND Package Information
  • ImageMagick-6.8.8.1-33 is installed
  • OR ImageMagick-devel-6.8.8.1-33 is installed
  • OR libMagick++-6_Q16-3-6.8.8.1-33 is installed
  • OR libMagick++-devel-6.8.8.1-33 is installed
  • OR perl-PerlMagick-6.8.8.1-33 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 is installed
  • AND Package Information
  • kernel-default-3.12.60-52.49.1 is installed
  • OR kernel-default-extra-3.12.60-52.49.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • MozillaThunderbird-68.2.1-3.58 is installed
  • OR MozillaThunderbird-translations-common-68.2.1-3.58 is installed
  • OR MozillaThunderbird-translations-other-68.2.1-3.58 is installed
  • BACK