Oval Definition:	oval:org.opensuse.security:def:56089
Revision Date: 2021-11-16 Version: 1 Title: Security update for samba (Important) Description: This update for samba fixes the following issues: - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440). - CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284). Family: unix Class: patch Status: Reference(s): 1005091 1012677 1014440 1038553 1046610 1051684 1051685 1053259 1058058 1079152 1082962 1083382 1083900 1087007 1087012 1087082 1087086 1087095 1092813 1092904 1094033 1094353 1094823 1096140 1096242 1096281 1096480 1096728 1097356 1111622 1118277 1122668 1159646 1160467 1160468 1192284 816099 831120 831299 833251 848014 853048 853049 858311 860092 860163 860165 860300 860302 861256 863297 867251 875631 880007 916835 933109 936058 936062 943645 944749 945219 947003 949752 955308 956084 956852 957986 959146 959257 959463 959709 960174 960458 960561 960629 961257 961500 961516 961588 961658 963193 963746 963765 963827 963960 964201 964730 965087 965199 965830 965891 965924 966026 966094 966278 966437 966471 966693 966831 966864 966910 967047 967292 967299 967650 967651 967802 967903 968010 968018 968074 968141 968206 968230 968234 968253 968448 968512 968643 968670 969112 969439 969571 969655 969690 969735 969992 969993 970062 970160 970249 970909 971125 971360 982366 983549 983638 983639 983643 983646 983651 983652 983653 983655 984006 984126 985659 995964 CVE-2009-5044 CVE-2009-5080 CVE-2009-5081 CVE-2012-2944 CVE-2013-2212 CVE-2013-4245 CVE-2013-6400 CVE-2013-6885 CVE-2014-1642 CVE-2014-1666 CVE-2014-1891 CVE-2014-1892 CVE-2014-1893 CVE-2014-1894 CVE-2014-1895 CVE-2014-1896 CVE-2014-1950 CVE-2015-0848 CVE-2015-4500 CVE-2015-4501 CVE-2015-4506 CVE-2015-4509 CVE-2015-4511 CVE-2015-4517 CVE-2015-4519 CVE-2015-4520 CVE-2015-4521 CVE-2015-4522 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696 CVE-2015-7174 CVE-2015-7175 CVE-2015-7176 CVE-2015-7177 CVE-2015-7180 CVE-2015-8709 CVE-2015-8812 CVE-2015-8816 CVE-2016-2124 CVE-2016-2143 CVE-2016-2184 CVE-2016-2384 CVE-2016-2782 CVE-2016-2815 CVE-2016-2818 CVE-2016-2819 CVE-2016-2821 CVE-2016-2822 CVE-2016-2824 CVE-2016-2828 CVE-2016-2831 CVE-2016-2834 CVE-2016-3139 CVE-2016-3156 CVE-2016-7098 CVE-2017-13305 CVE-2017-7546 CVE-2017-7547 CVE-2017-7548 CVE-2017-9798 CVE-2018-1000204 CVE-2018-1092 CVE-2018-1093 CVE-2018-1094 CVE-2018-1130 CVE-2018-18074 CVE-2018-19788 CVE-2018-3665 CVE-2018-5803 CVE-2018-5848 CVE-2018-7492 CVE-2019-14896 CVE-2019-14897 CVE-2019-17571 CVE-2020-25717 SUSE-SU-2015:1378-1 SUSE-SU-2015:1703-1 SUSE-SU-2015:2172-1 SUSE-SU-2016:1019-1 SUSE-SU-2016:1691-1 SUSE-SU-2016:3268-1 SUSE-SU-2017:2355-1 SUSE-SU-2017:2718-1 SUSE-SU-2018:1761-1 SUSE-SU-2019:0019-1 SUSE-SU-2020:0054-1 SUSE-SU-2020:0555-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS-SAP SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information aaa_base-84.87+git20180409.04c9dae-lp150.1 is installed OR aaa_base-extras-84.87+git20180409.04c9dae-lp150.1 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information curl-7.60.0-lp151.5.3 is installed OR curl-mini-7.60.0-lp151.5.3 is installed OR libcurl-devel-7.60.0-lp151.5.3 is installed OR libcurl-devel-32bit-7.60.0-lp151.5.3 is installed OR libcurl-mini-devel-7.60.0-lp151.5.3 is installed OR libcurl4-7.60.0-lp151.5.3 is installed OR libcurl4-32bit-7.60.0-lp151.5.3 is installed OR libcurl4-mini-7.60.0-lp151.5.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND libwmf-0.2.8.4-206.29.29 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information MozillaFirefox-38.3.0esr-22 is installed OR MozillaFirefox-translations-38.3.0esr-22 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND wget-1.14-17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information groff-1.22.2-5 is installed OR groff-full-1.22.2-5 is installed OR gxditview-1.22.2-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information apache2-2.4.16-20.13 is installed OR apache2-doc-2.4.16-20.13 is installed OR apache2-example-pages-2.4.16-20.13 is installed OR apache2-prefork-2.4.16-20.13 is installed OR apache2-utils-2.4.16-20.13 is installed OR apache2-worker-2.4.16-20.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND libdmx1-1.1.3-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information nfs-client-1.3.0-34.22 is installed OR nfs-doc-1.3.0-34.22 is installed OR nfs-kernel-server-1.3.0-34.22 is installed OR nfs-utils-1.3.0-34.22 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information MozillaFirefox-60.3.0-109.50 is installed OR MozillaFirefox-devel-60.3.0-109.50 is installed OR MozillaFirefox-translations-common-60.3.0-109.50 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_90-92_50-default-8-2 is installed OR kgraft-patch-SLE12-SP2_Update_15-8-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information glibc-2.22-61 is installed OR glibc-32bit-2.22-61 is installed OR glibc-devel-2.22-61 is installed OR glibc-devel-32bit-2.22-61 is installed OR glibc-html-2.22-61 is installed OR glibc-i18ndata-2.22-61 is installed OR glibc-info-2.22-61 is installed OR glibc-locale-2.22-61 is installed OR glibc-locale-32bit-2.22-61 is installed OR glibc-profile-2.22-61 is installed OR glibc-profile-32bit-2.22-61 is installed OR nscd-2.22-61 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information libexif-0.6.21-8.6 is installed OR libexif12-0.6.21-8.6 is installed OR libexif12-32bit-0.6.21-8.6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information ovmf-2017+git1492060560.b6d11d7c46-4.12 is installed OR ovmf-tools-2017+git1492060560.b6d11d7c46-4.12 is installed OR qemu-ovmf-x86_64-2017+git1492060560.b6d11d7c46-4.12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information libXinerama1-1.1.3-3 is installed OR libXinerama1-32bit-1.1.3-3 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information openstack-nova-14.0.11~dev13-4.22 is installed OR openstack-nova-api-14.0.11~dev13-4.22 is installed OR openstack-nova-cells-14.0.11~dev13-4.22 is installed OR openstack-nova-cert-14.0.11~dev13-4.22 is installed OR openstack-nova-compute-14.0.11~dev13-4.22 is installed OR openstack-nova-conductor-14.0.11~dev13-4.22 is installed OR openstack-nova-console-14.0.11~dev13-4.22 is installed OR openstack-nova-consoleauth-14.0.11~dev13-4.22 is installed OR openstack-nova-doc-14.0.11~dev13-4.22 is installed OR openstack-nova-novncproxy-14.0.11~dev13-4.22 is installed OR openstack-nova-placement-api-14.0.11~dev13-4.22 is installed OR openstack-nova-scheduler-14.0.11~dev13-4.22 is installed OR openstack-nova-serialproxy-14.0.11~dev13-4.22 is installed OR openstack-nova-vncproxy-14.0.11~dev13-4.22 is installed OR python-nova-14.0.11~dev13-4.22 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information gvim-7.4.326-17.6 is installed OR vim-7.4.326-17.6 is installed OR vim-data-7.4.326-17.6 is installed
BACK