SUSE-RU-2021:4149-1

Опубликовано: 22 дек. 2021

Источник: suse-cvrf

Описание

Recommended update for samba

This update for samba fixes the following issues:

The username map advice from the CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails (bsc#1192849).

Список пакетов

Image SLES15-SP3-EC2-HVM

samba-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-SAP-Azure

samba-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

ctdb-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

ctdb-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-SAP-BYOS-Azure

ctdb-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-SAP-BYOS-EC2-HVM

ctdb-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-SAP-BYOS-GCE

ctdb-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-SAP-EC2-HVM

samba-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-SAP-GCE

samba-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-SAPCAL-Azure

samba-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-SAPCAL-EC2-HVM

samba-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-SAPCAL-GCE

samba-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

SUSE Linux Enterprise High Availability Extension 15 SP3

ctdb-4.13.13+git.539.fdbc44a8598-3.20.2

SUSE Linux Enterprise Module for Basesystem 15 SP3

libdcerpc-binding0-4.13.13+git.539.fdbc44a8598-3.20.2

libdcerpc-binding0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libdcerpc-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libdcerpc-samr-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libdcerpc-samr0-4.13.13+git.539.fdbc44a8598-3.20.2

libdcerpc0-4.13.13+git.539.fdbc44a8598-3.20.2

libdcerpc0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libndr-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libndr-krb5pac-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libndr-krb5pac0-4.13.13+git.539.fdbc44a8598-3.20.2

libndr-krb5pac0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libndr-nbt-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libndr-nbt0-4.13.13+git.539.fdbc44a8598-3.20.2

libndr-nbt0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libndr-standard-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libndr-standard0-4.13.13+git.539.fdbc44a8598-3.20.2

libndr-standard0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libndr1-4.13.13+git.539.fdbc44a8598-3.20.2

libndr1-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libnetapi-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libnetapi0-4.13.13+git.539.fdbc44a8598-3.20.2

libnetapi0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-credentials-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-credentials0-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-credentials0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-errors-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-errors0-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-errors0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-hostconfig-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-hostconfig0-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-hostconfig0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-passdb-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-passdb0-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-passdb0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-policy-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-policy-python3-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-policy0-python3-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-util-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-util0-4.13.13+git.539.fdbc44a8598-3.20.2

libsamba-util0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libsamdb-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libsamdb0-4.13.13+git.539.fdbc44a8598-3.20.2

libsamdb0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libsmbclient-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libsmbclient0-4.13.13+git.539.fdbc44a8598-3.20.2

libsmbconf-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libsmbconf0-4.13.13+git.539.fdbc44a8598-3.20.2

libsmbconf0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libsmbldap-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libsmbldap2-4.13.13+git.539.fdbc44a8598-3.20.2

libsmbldap2-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libtevent-util-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libtevent-util0-4.13.13+git.539.fdbc44a8598-3.20.2

libtevent-util0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

libwbclient-devel-4.13.13+git.539.fdbc44a8598-3.20.2

libwbclient0-4.13.13+git.539.fdbc44a8598-3.20.2

libwbclient0-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

samba-4.13.13+git.539.fdbc44a8598-3.20.2

samba-ceph-4.13.13+git.539.fdbc44a8598-3.20.2

samba-client-4.13.13+git.539.fdbc44a8598-3.20.2

samba-core-devel-4.13.13+git.539.fdbc44a8598-3.20.2

samba-dsdb-modules-4.13.13+git.539.fdbc44a8598-3.20.2

samba-gpupdate-4.13.13+git.539.fdbc44a8598-3.20.2

samba-ldb-ldap-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

samba-libs-python3-4.13.13+git.539.fdbc44a8598-3.20.2

samba-python3-4.13.13+git.539.fdbc44a8598-3.20.2

samba-winbind-4.13.13+git.539.fdbc44a8598-3.20.2

samba-winbind-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

SUSE Linux Enterprise Module for Python 2 15 SP3

samba-ad-dc-4.13.13+git.539.fdbc44a8598-3.20.2

Ссылки

https://www.suse.com/support/update/announcement/-2021-4149/suse-ru-20214149-1/
Link for SUSE-RU-2021:4149-1
https://lists.suse.com/pipermail/sle-updates/2021-December/021170.html
E-Mail link for SUSE-RU-2021:4149-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1192849
SUSE Bug 1192849
https://www.suse.com/security/cve/CVE-2020-25717/
SUSE CVE CVE-2020-25717 page

Описание

A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.

Затронутые продукты

Image SLES15-SP3-EC2-HVM:samba-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-EC2-HVM:samba-client-32bit-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-EC2-HVM:samba-client-4.13.13+git.539.fdbc44a8598-3.20.2

Image SLES15-SP3-EC2-HVM:samba-libs-4.13.13+git.539.fdbc44a8598-3.20.2

Ссылки

https://www.suse.com/security/cve/CVE-2020-25717.html
CVE-2020-25717
https://bugzilla.suse.com/1192284
SUSE Bug 1192284
https://bugzilla.suse.com/1192505
SUSE Bug 1192505
https://bugzilla.suse.com/1192601
SUSE Bug 1192601
https://bugzilla.suse.com/1192849
SUSE Bug 1192849
https://bugzilla.suse.com/1193011
SUSE Bug 1193011
https://bugzilla.suse.com/1194049
SUSE Bug 1194049
https://bugzilla.suse.com/1194307
SUSE Bug 1194307
https://bugzilla.suse.com/1195815
SUSE Bug 1195815
https://bugzilla.suse.com/1196344
SUSE Bug 1196344
https://bugzilla.suse.com/1196717
SUSE Bug 1196717
https://bugzilla.suse.com/1196920
SUSE Bug 1196920
https://bugzilla.suse.com/1205061
SUSE Bug 1205061

SUSE-RU-2021:4149-1

Описание

Список пакетов

Image SLES15-SP3-EC2-HVM

Image SLES15-SP3-SAP-Azure

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

Image SLES15-SP3-SAP-EC2-HVM

Image SLES15-SP3-SAP-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Linux Enterprise High Availability Extension 15 SP3

SUSE Linux Enterprise Module for Basesystem 15 SP3

SUSE Linux Enterprise Module for Python 2 15 SP3

Ссылки

Уязвимость: CVE-2020-25717

Описание

Затронутые продукты

Ссылки