Oval Definition:	oval:org.opensuse.security:def:4284
Revision Date: 2021-11-10 Version: 1 Title: Security update for samba (Important) Description: This update for samba fixes the following issues: - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440). - CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284). - CVE-2021-23192: Fixed dcerpc requests to don't check all fragments against the first auth_state (bsc#1192214). Family: unix Class: patch Status: Reference(s): 1014440 1091764 1097375 1097401 1097404 1100369 1109160 1118367 1118368 1128220 1139924 1144902 1144903 1148539 1149841 1151021 1152143 1153108 1153158 1153161 1154289 1154598 1156205 1157051 1159670 1159723 1159729 1161025 1161168 1168023 1168669 1169851 1170667 1170713 1171313 1171740 1171999 1172175 1172176 1172461 1172506 1172958 1173032 1173307 1173311 1173983 1174117 1174121 1175443 1175987 1176024 1176092 1176294 1176397 1176674 1177409 1177412 1177413 1177414 1177867 1178319 1178361 1178362 1192214 1192284 906079 CVE-2016-2124 CVE-2017-3136 CVE-2018-1000168 CVE-2018-5741 CVE-2018-7161 CVE-2018-7167 CVE-2019-10072 CVE-2019-10218 CVE-2019-10220 CVE-2019-11048 CVE-2019-12418 CVE-2019-14833 CVE-2019-14835 CVE-2019-14847 CVE-2019-17133 CVE-2019-17563 CVE-2019-6477 CVE-2020-10704 CVE-2020-11076 CVE-2020-11077 CVE-2020-11100 CVE-2020-12402 CVE-2020-13777 CVE-2020-13934 CVE-2020-13935 CVE-2020-16846 CVE-2020-17490 CVE-2020-25592 CVE-2020-25717 CVE-2020-27670 CVE-2020-27671 CVE-2020-27672 CVE-2020-27673 CVE-2020-8616 CVE-2020-8617 CVE-2020-8618 CVE-2020-8619 CVE-2020-8620 CVE-2020-8621 CVE-2020-8622 CVE-2020-8623 CVE-2020-8624 CVE-2021-23192 SUSE-SU-2018:1918-1 SUSE-SU-2019:2572-1 SUSE-SU-2019:2866-1 SUSE-SU-2020:0226-1 SUSE-SU-2020:0852-1 SUSE-SU-2020:1132-1 SUSE-SU-2020:1584-1 SUSE-SU-2020:1661-1 SUSE-SU-2020:1850-1 SUSE-SU-2020:1919-1 SUSE-SU-2020:2045-1 SUSE-SU-2020:2914-1 SUSE-SU-2020:3049-1 SUSE-SU-2020:3155-1 SUSE-SU-2021:3649-1 Platform(s): SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 11 SP4 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 12 SP5 SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise High Availability 15 SP1 SUSE Linux Enterprise High Availability 15 SP2 SUSE Linux Enterprise High Availability Extension 11 SP3 SUSE Linux Enterprise High Availability Extension 11 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Live Patching 12 SP4 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information openstack-cinder-2014.2.3.dev13-1 is installed OR openstack-cinder-volume-2014.2.3.dev13-1 is installed OR python-cinder-2014.2.3.dev13-1 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.3.2-6 is installed OR libreoffice-sdk-4.3.3.2-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information MozillaFirefox-31.1.0esr-1 is installed OR MozillaFirefox-translations-31.1.0esr-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information curl-7.37.0-15 is installed OR libcurl4-7.37.0-15 is installed OR libcurl4-32bit-7.37.0-15 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information cups-filters-1.0.58-13 is installed OR cups-filters-cups-browsed-1.0.58-13 is installed OR cups-filters-foomatic-rip-1.0.58-13 is installed OR cups-filters-ghostscript-1.0.58-13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information NetworkManager-1.0.12-12 is installed OR NetworkManager-lang-1.0.12-12 is installed OR libnm-glib-vpn1-1.0.12-12 is installed OR libnm-glib4-1.0.12-12 is installed OR libnm-util2-1.0.12-12 is installed OR libnm0-1.0.12-12 is installed OR typelib-1_0-NM-1_0-1.0.12-12 is installed OR typelib-1_0-NMClient-1_0-1.0.12-12 is installed OR typelib-1_0-NetworkManager-1_0-1.0.12-12 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information bash-4.3-83.15 is installed OR bash-doc-4.3-83.15 is installed OR bash-lang-4.3-83.15 is installed OR libreadline6-6.3-83.15 is installed OR libreadline6-32bit-6.3-83.15 is installed OR readline-doc-6.3-83.15 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND conntrack-tools-1.4.2-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND ruby2.1-rubygem-bundler-1.7.3-3 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Availability 12 SP5 is installed OR SUSE Linux Enterprise High Performance Computing 12 SP5 is installed OR SUSE Linux Enterprise Server 12 SP5 is installed AND ctdb-4.10.18+git.339.c912385a5e1-3.41.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 is installed AND Package Information ctdb-4.7.11+git.231.7f324c4d89e-4.40 is installed OR samba-4.7.11+git.231.7f324c4d89e-4.40 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP1 is installed AND Package Information ctdb-4.9.5+git.210.ab0549acb05-3.14 is installed OR samba-4.9.5+git.210.ab0549acb05-3.14 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP2 is installed AND Package Information ruby2.5-rubygem-puma-4.3.5-3.3 is installed OR rubygem-puma-4.3.5-3.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP3 is installed AND lighttpd-1.4.20-2.54.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed AND gnutls-3.6.7-6.29 is installed OR libgnutls-devel-3.6.7-6.29 is installed OR libgnutls30-3.6.7-6.29 is installed OR libgnutls30-32bit-3.6.7-6.29 is installed OR libgnutls30-hmac-3.6.7-6.29 is installed OR libgnutls30-hmac-32bit-3.6.7-6.29 is installed OR libgnutlsxx-devel-3.6.7-6.29 is installed OR libgnutlsxx28-3.6.7-6.29 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15-LTSS is installed AND gnutls-3.6.7-6.29 is installed OR libgnutls-devel-3.6.7-6.29 is installed OR libgnutls30-3.6.7-6.29 is installed OR libgnutls30-32bit-3.6.7-6.29 is installed OR libgnutls30-hmac-3.6.7-6.29 is installed OR libgnutls30-hmac-32bit-3.6.7-6.29 is installed OR libgnutlsxx-devel-3.6.7-6.29 is installed OR libgnutlsxx28-3.6.7-6.29 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_92-6_30-default-2-2 is installed OR kgraft-patch-SLE12-SP3_Update_5-2-2 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP4 is installed AND Package Information kgraft-patch-4_12_14-95_3-default-6-2 is installed OR kgraft-patch-SLE12-SP4_Update_1-6-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information puppet-3.6.2-3 is installed OR puppet-server-3.6.2-3 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND syslog-ng-3.4.5-3 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_32-default-2-2 is installed OR kernel-livepatch-SLE15_Update_13-2-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed AND Package Information bind-9.16.6-12.32 is installed OR bind-chrootenv-9.16.6-12.32 is installed OR bind-doc-9.16.6-12.32 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php5-5.5.14-4 is installed OR php5-5.5.14-4 is installed OR php5-bcmath-5.5.14-4 is installed OR php5-bz2-5.5.14-4 is installed OR php5-calendar-5.5.14-4 is installed OR php5-ctype-5.5.14-4 is installed OR php5-curl-5.5.14-4 is installed OR php5-dba-5.5.14-4 is installed OR php5-dom-5.5.14-4 is installed OR php5-enchant-5.5.14-4 is installed OR php5-exif-5.5.14-4 is installed OR php5-fastcgi-5.5.14-4 is installed OR php5-fileinfo-5.5.14-4 is installed OR php5-fpm-5.5.14-4 is installed OR php5-ftp-5.5.14-4 is installed OR php5-gd-5.5.14-4 is installed OR php5-gettext-5.5.14-4 is installed OR php5-gmp-5.5.14-4 is installed OR php5-iconv-5.5.14-4 is installed OR php5-intl-5.5.14-4 is installed OR php5-json-5.5.14-4 is installed OR php5-ldap-5.5.14-4 is installed OR php5-mbstring-5.5.14-4 is installed OR php5-mcrypt-5.5.14-4 is installed OR php5-mysql-5.5.14-4 is installed OR php5-odbc-5.5.14-4 is installed OR php5-openssl-5.5.14-4 is installed OR php5-pcntl-5.5.14-4 is installed OR php5-pdo-5.5.14-4 is installed OR php5-pear-5.5.14-4 is installed OR php5-pgsql-5.5.14-4 is installed OR php5-pspell-5.5.14-4 is installed OR php5-shmop-5.5.14-4 is installed OR php5-snmp-5.5.14-4 is installed OR php5-soap-5.5.14-4 is installed OR php5-sockets-5.5.14-4 is installed OR php5-sqlite-5.5.14-4 is installed OR php5-suhosin-5.5.14-4 is installed OR php5-sysvmsg-5.5.14-4 is installed OR php5-sysvsem-5.5.14-4 is installed OR php5-sysvshm-5.5.14-4 is installed OR php5-tokenizer-5.5.14-4 is installed OR php5-wddx-5.5.14-4 is installed OR php5-xmlreader-5.5.14-4 is installed OR php5-xmlrpc-5.5.14-4 is installed OR php5-xmlwriter-5.5.14-4 is installed OR php5-xsl-5.5.14-4 is installed OR php5-zip-5.5.14-4 is installed OR php5-zlib-5.5.14-4 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information nodejs8-8.11.3-3.5 is installed OR nodejs8-devel-8.11.3-3.5 is installed OR nodejs8-docs-8.11.3-3.5 is installed OR npm8-8.11.3-3.5 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information apache2-mod_php7-7.2.5-4.58 is installed OR php7-7.2.5-4.58 is installed OR php7-bcmath-7.2.5-4.58 is installed OR php7-bz2-7.2.5-4.58 is installed OR php7-calendar-7.2.5-4.58 is installed OR php7-ctype-7.2.5-4.58 is installed OR php7-curl-7.2.5-4.58 is installed OR php7-dba-7.2.5-4.58 is installed OR php7-devel-7.2.5-4.58 is installed OR php7-dom-7.2.5-4.58 is installed OR php7-enchant-7.2.5-4.58 is installed OR php7-exif-7.2.5-4.58 is installed OR php7-fastcgi-7.2.5-4.58 is installed OR php7-fileinfo-7.2.5-4.58 is installed OR php7-fpm-7.2.5-4.58 is installed OR php7-ftp-7.2.5-4.58 is installed OR php7-gd-7.2.5-4.58 is installed OR php7-gettext-7.2.5-4.58 is installed OR php7-gmp-7.2.5-4.58 is installed OR php7-iconv-7.2.5-4.58 is installed OR php7-intl-7.2.5-4.58 is installed OR php7-json-7.2.5-4.58 is installed OR php7-ldap-7.2.5-4.58 is installed OR php7-mbstring-7.2.5-4.58 is installed OR php7-mysql-7.2.5-4.58 is installed OR php7-odbc-7.2.5-4.58 is installed OR php7-opcache-7.2.5-4.58 is installed OR php7-openssl-7.2.5-4.58 is installed OR php7-pcntl-7.2.5-4.58 is installed OR php7-pdo-7.2.5-4.58 is installed OR php7-pear-7.2.5-4.58 is installed OR php7-pear-Archive_Tar-7.2.5-4.58 is installed OR php7-pgsql-7.2.5-4.58 is installed OR php7-phar-7.2.5-4.58 is installed OR php7-posix-7.2.5-4.58 is installed OR php7-readline-7.2.5-4.58 is installed OR php7-shmop-7.2.5-4.58 is installed OR php7-snmp-7.2.5-4.58 is installed OR php7-soap-7.2.5-4.58 is installed OR php7-sockets-7.2.5-4.58 is installed OR php7-sodium-7.2.5-4.58 is installed OR php7-sqlite-7.2.5-4.58 is installed OR php7-sysvmsg-7.2.5-4.58 is installed OR php7-sysvsem-7.2.5-4.58 is installed OR php7-sysvshm-7.2.5-4.58 is installed OR php7-tidy-7.2.5-4.58 is installed OR php7-tokenizer-7.2.5-4.58 is installed OR php7-wddx-7.2.5-4.58 is installed OR php7-xmlreader-7.2.5-4.58 is installed OR php7-xmlrpc-7.2.5-4.58 is installed OR php7-xmlwriter-7.2.5-4.58 is installed OR php7-xsl-7.2.5-4.58 is installed OR php7-zip-7.2.5-4.58 is installed OR php7-zlib-7.2.5-4.58 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND virt-utils-1.2.1-0.7.19 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information libjasper-1.900.1-134.17.1 is installed OR libjasper-32bit-1.900.1-134.17.1 is installed OR libjasper-x86-1.900.1-134.17.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information avahi-0.6.31-20 is installed OR avahi-lang-0.6.31-20 is installed OR avahi-utils-0.6.31-20 is installed OR libavahi-client3-0.6.31-20 is installed OR libavahi-client3-32bit-0.6.31-20 is installed OR libavahi-common3-0.6.31-20 is installed OR libavahi-common3-32bit-0.6.31-20 is installed OR libavahi-core7-0.6.31-20 is installed OR libdns_sd-0.6.31-20 is installed OR libdns_sd-32bit-0.6.31-20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-28 is installed OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information libsnmp30-5.7.3-6.3 is installed OR libsnmp30-32bit-5.7.3-6.3 is installed OR net-snmp-5.7.3-6.3 is installed OR perl-SNMP-5.7.3-6.3 is installed OR snmp-mibs-5.7.3-6.3 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information libvpx-1.6.1-6.3 is installed OR libvpx4-1.6.1-6.3 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information apache2-2.4.23-14 is installed OR apache2-doc-2.4.23-14 is installed OR apache2-example-pages-2.4.23-14 is installed OR apache2-prefork-2.4.23-14 is installed OR apache2-utils-2.4.23-14 is installed OR apache2-worker-2.4.23-14 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information cups-2.2.7-3.17 is installed OR cups-client-2.2.7-3.17 is installed OR cups-config-2.2.7-3.17 is installed OR cups-ddk-2.2.7-3.17 is installed OR cups-devel-2.2.7-3.17 is installed OR libcups2-2.2.7-3.17 is installed OR libcups2-32bit-2.2.7-3.17 is installed OR libcupscgi1-2.2.7-3.17 is installed OR libcupsimage2-2.2.7-3.17 is installed OR libcupsmime1-2.2.7-3.17 is installed OR libcupsppdc1-2.2.7-3.17 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND libotr-devel-3.2.0-10.3.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information ImageMagick-6.8.8.1-5 is installed OR ImageMagick-devel-6.8.8.1-5 is installed OR libMagick++-6_Q16-3-6.8.8.1-5 is installed OR libMagick++-devel-6.8.8.1-5 is installed OR perl-PerlMagick-6.8.8.1-5 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information bind-9.9.6P1-32.1 is installed OR bind-devel-9.9.6P1-32.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information bind-9.9.9P1-49.1 is installed OR bind-devel-9.9.9P1-49.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND polkit-devel-0.113-5.6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information NetworkManager-1.0.12-8 is installed OR NetworkManager-lang-1.0.12-8 is installed OR typelib-1_0-NM-1_0-1.0.12-8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND bash-lang-4.3-82 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-25.3 is installed OR kernel-default-extra-4.12.14-25.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information bluez-5.48-5.16 is installed OR bluez-cups-5.48-5.16 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information xorg-x11-server-1.20.3-22.5 is installed OR xorg-x11-server-wayland-1.20.3-22.5 is installed
BACK