SUSE-SU-2020:2036-1

Опубликовано: 24 июл. 2020

Источник: suse-cvrf

Описание

Security update for samba

This update for samba fixes the following issues:

CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets containing dots could potentially have consumed excessive CPU (bsc#1173160).
Fixed a packaging issue where samba_winbind package was installing python3-base without python3 (bsc#1169521).
Fixed an issue with spnego fallback from kerberos to ntlmssp in smbd server (bsc#1169473).
Fixed ntlm authentications with 'winbind use default domain = yes' (bsc#1173429).
Added solution for upgrade problem with libsmbldap2 package (bsc#1172810).

Список пакетов

Image SLES12-SP5-Azure-BYOS

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-Azure-Basic-On-Demand

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-Azure-HPC-BYOS

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-Azure-HPC-On-Demand

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-Azure-SAP-BYOS

ctdb-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-Azure-SAP-On-Demand

ctdb-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-Azure-Standard-On-Demand

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-EC2-BYOS

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-EC2-ECS-On-Demand

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-EC2-On-Demand

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-EC2-SAP-BYOS

ctdb-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-EC2-SAP-On-Demand

ctdb-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-GCE-BYOS

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-GCE-On-Demand

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-GCE-SAP-BYOS

ctdb-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-GCE-SAP-On-Demand

ctdb-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-OCI-BYOS-BYOS

libdcerpc-binding0-4.10.5+git.192.26ffbcd7231-3.11.1

libdcerpc0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-krb5pac0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-nbt0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-standard0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr0-4.10.5+git.192.26ffbcd7231-3.11.1

libnetapi0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-credentials0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-errors0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-hostconfig0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-passdb0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-util0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamdb0-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbconf0-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbldap2-4.10.5+git.192.26ffbcd7231-3.11.1

libtevent-util0-4.10.5+git.192.26ffbcd7231-3.11.1

libwbclient0-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

ctdb-4.10.5+git.192.26ffbcd7231-3.11.1

libdcerpc-binding0-4.10.5+git.192.26ffbcd7231-3.11.1

libdcerpc0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-krb5pac0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-nbt0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-standard0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr0-4.10.5+git.192.26ffbcd7231-3.11.1

libnetapi0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-credentials0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-errors0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-hostconfig0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-passdb0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-util0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamdb0-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbconf0-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbldap2-4.10.5+git.192.26ffbcd7231-3.11.1

libtevent-util0-4.10.5+git.192.26ffbcd7231-3.11.1

libwbclient0-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

ctdb-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

ctdb-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

SUSE Linux Enterprise High Availability Extension 12 SP5

ctdb-4.10.5+git.192.26ffbcd7231-3.11.1

SUSE Linux Enterprise Server 12 SP5

libdcerpc-binding0-4.10.5+git.192.26ffbcd7231-3.11.1

libdcerpc-binding0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libdcerpc0-4.10.5+git.192.26ffbcd7231-3.11.1

libdcerpc0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-krb5pac0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-krb5pac0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-nbt0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-nbt0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-standard0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-standard0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libndr0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libnetapi0-4.10.5+git.192.26ffbcd7231-3.11.1

libnetapi0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-credentials0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-credentials0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-errors0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-errors0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-hostconfig0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-hostconfig0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-passdb0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-passdb0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-util0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-util0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsamdb0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamdb0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbclient0-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbclient0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbconf0-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbconf0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbldap2-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbldap2-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libtevent-util0-4.10.5+git.192.26ffbcd7231-3.11.1

libtevent-util0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libwbclient0-4.10.5+git.192.26ffbcd7231-3.11.1

libwbclient0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

samba-4.10.5+git.192.26ffbcd7231-3.11.1

samba-client-4.10.5+git.192.26ffbcd7231-3.11.1

samba-client-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

samba-doc-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-python3-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-python3-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

samba-winbind-4.10.5+git.192.26ffbcd7231-3.11.1

samba-winbind-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

SUSE Linux Enterprise Server for SAP Applications 12 SP5

libdcerpc-binding0-4.10.5+git.192.26ffbcd7231-3.11.1

libdcerpc-binding0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libdcerpc0-4.10.5+git.192.26ffbcd7231-3.11.1

libdcerpc0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-krb5pac0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-krb5pac0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-nbt0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-nbt0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-standard0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-standard0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libndr0-4.10.5+git.192.26ffbcd7231-3.11.1

libndr0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libnetapi0-4.10.5+git.192.26ffbcd7231-3.11.1

libnetapi0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-credentials0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-credentials0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-errors0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-errors0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-hostconfig0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-hostconfig0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-passdb0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-passdb0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-util0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-util0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsamdb0-4.10.5+git.192.26ffbcd7231-3.11.1

libsamdb0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbclient0-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbclient0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbconf0-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbconf0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbldap2-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbldap2-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libtevent-util0-4.10.5+git.192.26ffbcd7231-3.11.1

libtevent-util0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

libwbclient0-4.10.5+git.192.26ffbcd7231-3.11.1

libwbclient0-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

samba-4.10.5+git.192.26ffbcd7231-3.11.1

samba-client-4.10.5+git.192.26ffbcd7231-3.11.1

samba-client-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

samba-doc-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-python3-4.10.5+git.192.26ffbcd7231-3.11.1

samba-libs-python3-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

samba-winbind-4.10.5+git.192.26ffbcd7231-3.11.1

samba-winbind-32bit-4.10.5+git.192.26ffbcd7231-3.11.1

SUSE Linux Enterprise Software Development Kit 12 SP5

libndr-devel-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-krb5pac-devel-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-nbt-devel-4.10.5+git.192.26ffbcd7231-3.11.1

libndr-standard-devel-4.10.5+git.192.26ffbcd7231-3.11.1

libsamba-util-devel-4.10.5+git.192.26ffbcd7231-3.11.1

libsmbclient-devel-4.10.5+git.192.26ffbcd7231-3.11.1

libwbclient-devel-4.10.5+git.192.26ffbcd7231-3.11.1

samba-core-devel-4.10.5+git.192.26ffbcd7231-3.11.1

Ссылки

https://www.suse.com/support/update/announcement/2020/suse-su-20202036-1/
Link for SUSE-SU-2020:2036-1
https://lists.suse.com/pipermail/sle-security-updates/2020-July/007180.html
E-Mail link for SUSE-SU-2020:2036-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1169473
SUSE Bug 1169473
https://bugzilla.suse.com/1169521
SUSE Bug 1169521
https://bugzilla.suse.com/1172810
SUSE Bug 1172810
https://bugzilla.suse.com/1173160
SUSE Bug 1173160
https://bugzilla.suse.com/1173429
SUSE Bug 1173429
https://www.suse.com/security/cve/CVE-2020-10745/
SUSE CVE CVE-2020-10745 page

Описание

A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.

Затронутые продукты

Image SLES12-SP5-Azure-BYOS:samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-Azure-Basic-On-Demand:samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-Azure-HPC-BYOS:samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Image SLES12-SP5-Azure-HPC-On-Demand:samba-libs-4.10.5+git.192.26ffbcd7231-3.11.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-10745.html
CVE-2020-10745
https://bugzilla.suse.com/1173160
SUSE Bug 1173160

SUSE-SU-2020:2036-1

Описание

Список пакетов

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-OCI-BYOS-BYOS

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise High Availability Extension 12 SP5

SUSE Linux Enterprise Server 12 SP5

SUSE Linux Enterprise Server for SAP Applications 12 SP5

SUSE Linux Enterprise Software Development Kit 12 SP5

Ссылки

Уязвимость: CVE-2020-10745

Описание

Затронутые продукты

Ссылки