SUSE-SU-2019:1203-1

Опубликовано: 10 мая 2019

Источник: suse-cvrf

Описание

Security update for samba

This update for samba fixes the following issues:

Security issue fixed:

CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share (bsc#1131060).

Non-security issues fixed:

Fixed an issue where the first login failed and subsequent ones work (bsc#1126463).
Fixed winbind running out of memory with high number of domain groups (bsc#1114459).
Backport changes to support quotas with SMB2 (bsc#1106119).

Список пакетов

SUSE Enterprise Storage 4

libdcerpc-binding0-4.4.2-38.25.1

libdcerpc-binding0-32bit-4.4.2-38.25.1

libdcerpc0-4.4.2-38.25.1

libdcerpc0-32bit-4.4.2-38.25.1

libndr-krb5pac0-4.4.2-38.25.1

libndr-krb5pac0-32bit-4.4.2-38.25.1

libndr-nbt0-4.4.2-38.25.1

libndr-nbt0-32bit-4.4.2-38.25.1

libndr-standard0-4.4.2-38.25.1

libndr-standard0-32bit-4.4.2-38.25.1

libndr0-4.4.2-38.25.1

libndr0-32bit-4.4.2-38.25.1

libnetapi0-4.4.2-38.25.1

libnetapi0-32bit-4.4.2-38.25.1

libsamba-credentials0-4.4.2-38.25.1

libsamba-credentials0-32bit-4.4.2-38.25.1

libsamba-errors0-4.4.2-38.25.1

libsamba-errors0-32bit-4.4.2-38.25.1

libsamba-hostconfig0-4.4.2-38.25.1

libsamba-hostconfig0-32bit-4.4.2-38.25.1

libsamba-passdb0-4.4.2-38.25.1

libsamba-passdb0-32bit-4.4.2-38.25.1

libsamba-util0-4.4.2-38.25.1

libsamba-util0-32bit-4.4.2-38.25.1

libsamdb0-4.4.2-38.25.1

libsamdb0-32bit-4.4.2-38.25.1

libsmbclient0-4.4.2-38.25.1

libsmbclient0-32bit-4.4.2-38.25.1

libsmbconf0-4.4.2-38.25.1

libsmbconf0-32bit-4.4.2-38.25.1

libsmbldap0-4.4.2-38.25.1

libsmbldap0-32bit-4.4.2-38.25.1

libtevent-util0-4.4.2-38.25.1

libtevent-util0-32bit-4.4.2-38.25.1

libwbclient0-4.4.2-38.25.1

libwbclient0-32bit-4.4.2-38.25.1

samba-4.4.2-38.25.1

samba-client-4.4.2-38.25.1

samba-client-32bit-4.4.2-38.25.1

samba-doc-4.4.2-38.25.1

samba-libs-4.4.2-38.25.1

samba-libs-32bit-4.4.2-38.25.1

samba-winbind-4.4.2-38.25.1

samba-winbind-32bit-4.4.2-38.25.1

SUSE Linux Enterprise High Availability Extension 12 SP2

ctdb-4.4.2-38.25.1

SUSE Linux Enterprise Server 12 SP2-BCL

libdcerpc-binding0-4.4.2-38.25.1

libdcerpc-binding0-32bit-4.4.2-38.25.1

libdcerpc0-4.4.2-38.25.1

libdcerpc0-32bit-4.4.2-38.25.1

libndr-krb5pac0-4.4.2-38.25.1

libndr-krb5pac0-32bit-4.4.2-38.25.1

libndr-nbt0-4.4.2-38.25.1

libndr-nbt0-32bit-4.4.2-38.25.1

libndr-standard0-4.4.2-38.25.1

libndr-standard0-32bit-4.4.2-38.25.1

libndr0-4.4.2-38.25.1

libndr0-32bit-4.4.2-38.25.1

libnetapi0-4.4.2-38.25.1

libnetapi0-32bit-4.4.2-38.25.1

libsamba-credentials0-4.4.2-38.25.1

libsamba-credentials0-32bit-4.4.2-38.25.1

libsamba-errors0-4.4.2-38.25.1

libsamba-errors0-32bit-4.4.2-38.25.1

libsamba-hostconfig0-4.4.2-38.25.1

libsamba-hostconfig0-32bit-4.4.2-38.25.1

libsamba-passdb0-4.4.2-38.25.1

libsamba-passdb0-32bit-4.4.2-38.25.1

libsamba-util0-4.4.2-38.25.1

libsamba-util0-32bit-4.4.2-38.25.1

libsamdb0-4.4.2-38.25.1

libsamdb0-32bit-4.4.2-38.25.1

libsmbclient0-4.4.2-38.25.1

libsmbclient0-32bit-4.4.2-38.25.1

libsmbconf0-4.4.2-38.25.1

libsmbconf0-32bit-4.4.2-38.25.1

libsmbldap0-4.4.2-38.25.1

libsmbldap0-32bit-4.4.2-38.25.1

libtevent-util0-4.4.2-38.25.1

libtevent-util0-32bit-4.4.2-38.25.1

libwbclient0-4.4.2-38.25.1

libwbclient0-32bit-4.4.2-38.25.1

samba-4.4.2-38.25.1

samba-client-4.4.2-38.25.1

samba-client-32bit-4.4.2-38.25.1

samba-doc-4.4.2-38.25.1

samba-libs-4.4.2-38.25.1

samba-libs-32bit-4.4.2-38.25.1

samba-winbind-4.4.2-38.25.1

samba-winbind-32bit-4.4.2-38.25.1

SUSE Linux Enterprise Server 12 SP2-LTSS

libdcerpc-binding0-4.4.2-38.25.1

libdcerpc-binding0-32bit-4.4.2-38.25.1

libdcerpc0-4.4.2-38.25.1

libdcerpc0-32bit-4.4.2-38.25.1

libndr-krb5pac0-4.4.2-38.25.1

libndr-krb5pac0-32bit-4.4.2-38.25.1

libndr-nbt0-4.4.2-38.25.1

libndr-nbt0-32bit-4.4.2-38.25.1

libndr-standard0-4.4.2-38.25.1

libndr-standard0-32bit-4.4.2-38.25.1

libndr0-4.4.2-38.25.1

libndr0-32bit-4.4.2-38.25.1

libnetapi0-4.4.2-38.25.1

libnetapi0-32bit-4.4.2-38.25.1

libsamba-credentials0-4.4.2-38.25.1

libsamba-credentials0-32bit-4.4.2-38.25.1

libsamba-errors0-4.4.2-38.25.1

libsamba-errors0-32bit-4.4.2-38.25.1

libsamba-hostconfig0-4.4.2-38.25.1

libsamba-hostconfig0-32bit-4.4.2-38.25.1

libsamba-passdb0-4.4.2-38.25.1

libsamba-passdb0-32bit-4.4.2-38.25.1

libsamba-util0-4.4.2-38.25.1

libsamba-util0-32bit-4.4.2-38.25.1

libsamdb0-4.4.2-38.25.1

libsamdb0-32bit-4.4.2-38.25.1

libsmbclient0-4.4.2-38.25.1

libsmbclient0-32bit-4.4.2-38.25.1

libsmbconf0-4.4.2-38.25.1

libsmbconf0-32bit-4.4.2-38.25.1

libsmbldap0-4.4.2-38.25.1

libsmbldap0-32bit-4.4.2-38.25.1

libtevent-util0-4.4.2-38.25.1

libtevent-util0-32bit-4.4.2-38.25.1

libwbclient0-4.4.2-38.25.1

libwbclient0-32bit-4.4.2-38.25.1

samba-4.4.2-38.25.1

samba-client-4.4.2-38.25.1

samba-client-32bit-4.4.2-38.25.1

samba-doc-4.4.2-38.25.1

samba-libs-4.4.2-38.25.1

samba-libs-32bit-4.4.2-38.25.1

samba-winbind-4.4.2-38.25.1

samba-winbind-32bit-4.4.2-38.25.1

SUSE Linux Enterprise Server for SAP Applications 12 SP2

libdcerpc-binding0-4.4.2-38.25.1

libdcerpc-binding0-32bit-4.4.2-38.25.1

libdcerpc0-4.4.2-38.25.1

libdcerpc0-32bit-4.4.2-38.25.1

libndr-krb5pac0-4.4.2-38.25.1

libndr-krb5pac0-32bit-4.4.2-38.25.1

libndr-nbt0-4.4.2-38.25.1

libndr-nbt0-32bit-4.4.2-38.25.1

libndr-standard0-4.4.2-38.25.1

libndr-standard0-32bit-4.4.2-38.25.1

libndr0-4.4.2-38.25.1

libndr0-32bit-4.4.2-38.25.1

libnetapi0-4.4.2-38.25.1

libnetapi0-32bit-4.4.2-38.25.1

libsamba-credentials0-4.4.2-38.25.1

libsamba-credentials0-32bit-4.4.2-38.25.1

libsamba-errors0-4.4.2-38.25.1

libsamba-errors0-32bit-4.4.2-38.25.1

libsamba-hostconfig0-4.4.2-38.25.1

libsamba-hostconfig0-32bit-4.4.2-38.25.1

libsamba-passdb0-4.4.2-38.25.1

libsamba-passdb0-32bit-4.4.2-38.25.1

libsamba-util0-4.4.2-38.25.1

libsamba-util0-32bit-4.4.2-38.25.1

libsamdb0-4.4.2-38.25.1

libsamdb0-32bit-4.4.2-38.25.1

libsmbclient0-4.4.2-38.25.1

libsmbclient0-32bit-4.4.2-38.25.1

libsmbconf0-4.4.2-38.25.1

libsmbconf0-32bit-4.4.2-38.25.1

libsmbldap0-4.4.2-38.25.1

libsmbldap0-32bit-4.4.2-38.25.1

libtevent-util0-4.4.2-38.25.1

libtevent-util0-32bit-4.4.2-38.25.1

libwbclient0-4.4.2-38.25.1

libwbclient0-32bit-4.4.2-38.25.1

samba-4.4.2-38.25.1

samba-client-4.4.2-38.25.1

samba-client-32bit-4.4.2-38.25.1

samba-doc-4.4.2-38.25.1

samba-libs-4.4.2-38.25.1

samba-libs-32bit-4.4.2-38.25.1

samba-winbind-4.4.2-38.25.1

samba-winbind-32bit-4.4.2-38.25.1

SUSE OpenStack Cloud 7

libdcerpc-binding0-4.4.2-38.25.1

libdcerpc-binding0-32bit-4.4.2-38.25.1

libdcerpc0-4.4.2-38.25.1

libdcerpc0-32bit-4.4.2-38.25.1

libndr-krb5pac0-4.4.2-38.25.1

libndr-krb5pac0-32bit-4.4.2-38.25.1

libndr-nbt0-4.4.2-38.25.1

libndr-nbt0-32bit-4.4.2-38.25.1

libndr-standard0-4.4.2-38.25.1

libndr-standard0-32bit-4.4.2-38.25.1

libndr0-4.4.2-38.25.1

libndr0-32bit-4.4.2-38.25.1

libnetapi0-4.4.2-38.25.1

libnetapi0-32bit-4.4.2-38.25.1

libsamba-credentials0-4.4.2-38.25.1

libsamba-credentials0-32bit-4.4.2-38.25.1

libsamba-errors0-4.4.2-38.25.1

libsamba-errors0-32bit-4.4.2-38.25.1

libsamba-hostconfig0-4.4.2-38.25.1

libsamba-hostconfig0-32bit-4.4.2-38.25.1

libsamba-passdb0-4.4.2-38.25.1

libsamba-passdb0-32bit-4.4.2-38.25.1

libsamba-util0-4.4.2-38.25.1

libsamba-util0-32bit-4.4.2-38.25.1

libsamdb0-4.4.2-38.25.1

libsamdb0-32bit-4.4.2-38.25.1

libsmbclient0-4.4.2-38.25.1

libsmbclient0-32bit-4.4.2-38.25.1

libsmbconf0-4.4.2-38.25.1

libsmbconf0-32bit-4.4.2-38.25.1

libsmbldap0-4.4.2-38.25.1

libsmbldap0-32bit-4.4.2-38.25.1

libtevent-util0-4.4.2-38.25.1

libtevent-util0-32bit-4.4.2-38.25.1

libwbclient0-4.4.2-38.25.1

libwbclient0-32bit-4.4.2-38.25.1

samba-4.4.2-38.25.1

samba-client-4.4.2-38.25.1

samba-client-32bit-4.4.2-38.25.1

samba-doc-4.4.2-38.25.1

samba-libs-4.4.2-38.25.1

samba-libs-32bit-4.4.2-38.25.1

samba-winbind-4.4.2-38.25.1

samba-winbind-32bit-4.4.2-38.25.1

Ссылки

https://www.suse.com/support/update/announcement/2019/suse-su-20191203-1/
Link for SUSE-SU-2019:1203-1
https://lists.suse.com/pipermail/sle-security-updates/2019-May/005440.html
E-Mail link for SUSE-SU-2019:1203-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1087481
SUSE Bug 1087481
https://bugzilla.suse.com/1106119
SUSE Bug 1106119
https://bugzilla.suse.com/1114459
SUSE Bug 1114459
https://bugzilla.suse.com/1126463
SUSE Bug 1126463
https://bugzilla.suse.com/1131060
SUSE Bug 1131060
https://www.suse.com/security/cve/CVE-2019-3880/
SUSE CVE CVE-2019-3880 page

Описание

A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.

Затронутые продукты

SUSE Enterprise Storage 4:libdcerpc-binding0-32bit-4.4.2-38.25.1

SUSE Enterprise Storage 4:libdcerpc-binding0-4.4.2-38.25.1

SUSE Enterprise Storage 4:libdcerpc0-32bit-4.4.2-38.25.1

SUSE Enterprise Storage 4:libdcerpc0-4.4.2-38.25.1

Ссылки

https://www.suse.com/security/cve/CVE-2019-3880.html
CVE-2019-3880
https://bugzilla.suse.com/1131060
SUSE Bug 1131060
https://bugzilla.suse.com/1139519
SUSE Bug 1139519

SUSE-SU-2019:1203-1

Описание

Список пакетов

SUSE Enterprise Storage 4

SUSE Linux Enterprise High Availability Extension 12 SP2

SUSE Linux Enterprise Server 12 SP2-BCL

SUSE Linux Enterprise Server 12 SP2-LTSS

SUSE Linux Enterprise Server for SAP Applications 12 SP2

SUSE OpenStack Cloud 7

Ссылки

Уязвимость: CVE-2019-3880

Описание

Затронутые продукты

Ссылки