SUSE-SU-2021:1438-1

Опубликовано: 29 апр. 2021

Источник: suse-cvrf

Описание

Security update for samba

This update for samba fixes the following issues:

CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677).
Avoid free'ing our own pointer in memcache when memcache_trim attempts to reduce cache size (bsc#1179156).
Adjust smbcacls '--propagate-inheritance' feature to align with upstream (bsc#1178469).

Список пакетов

Image SLES12-SP5-Azure-BYOS

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-Azure-Basic-On-Demand

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-Azure-HPC-BYOS

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-Azure-HPC-On-Demand

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-Azure-SAP-BYOS

ctdb-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-Azure-SAP-On-Demand

ctdb-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-Azure-Standard-On-Demand

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-EC2-BYOS

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-EC2-ECS-On-Demand

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-EC2-On-Demand

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-EC2-SAP-BYOS

ctdb-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-EC2-SAP-On-Demand

ctdb-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-GCE-BYOS

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-GCE-On-Demand

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-GCE-SAP-BYOS

ctdb-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-GCE-SAP-On-Demand

ctdb-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-OCI-BYOS-BYOS

libdcerpc-binding0-4.10.18+git.269.dd608524c88-3.27.1

libdcerpc0-4.10.18+git.269.dd608524c88-3.27.1

libndr-krb5pac0-4.10.18+git.269.dd608524c88-3.27.1

libndr-nbt0-4.10.18+git.269.dd608524c88-3.27.1

libndr-standard0-4.10.18+git.269.dd608524c88-3.27.1

libndr0-4.10.18+git.269.dd608524c88-3.27.1

libnetapi0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-credentials0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-errors0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-hostconfig0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-passdb0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-util0-4.10.18+git.269.dd608524c88-3.27.1

libsamdb0-4.10.18+git.269.dd608524c88-3.27.1

libsmbconf0-4.10.18+git.269.dd608524c88-3.27.1

libsmbldap2-4.10.18+git.269.dd608524c88-3.27.1

libtevent-util0-4.10.18+git.269.dd608524c88-3.27.1

libwbclient0-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

ctdb-4.10.18+git.269.dd608524c88-3.27.1

libdcerpc-binding0-4.10.18+git.269.dd608524c88-3.27.1

libdcerpc0-4.10.18+git.269.dd608524c88-3.27.1

libndr-krb5pac0-4.10.18+git.269.dd608524c88-3.27.1

libndr-nbt0-4.10.18+git.269.dd608524c88-3.27.1

libndr-standard0-4.10.18+git.269.dd608524c88-3.27.1

libndr0-4.10.18+git.269.dd608524c88-3.27.1

libnetapi0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-credentials0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-errors0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-hostconfig0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-passdb0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-util0-4.10.18+git.269.dd608524c88-3.27.1

libsamdb0-4.10.18+git.269.dd608524c88-3.27.1

libsmbconf0-4.10.18+git.269.dd608524c88-3.27.1

libsmbldap2-4.10.18+git.269.dd608524c88-3.27.1

libtevent-util0-4.10.18+git.269.dd608524c88-3.27.1

libwbclient0-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

ctdb-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

ctdb-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

SUSE Linux Enterprise High Availability Extension 12 SP5

ctdb-4.10.18+git.269.dd608524c88-3.27.1

SUSE Linux Enterprise Server 12 SP5

libdcerpc-binding0-4.10.18+git.269.dd608524c88-3.27.1

libdcerpc-binding0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libdcerpc0-4.10.18+git.269.dd608524c88-3.27.1

libdcerpc0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libndr-krb5pac0-4.10.18+git.269.dd608524c88-3.27.1

libndr-krb5pac0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libndr-nbt0-4.10.18+git.269.dd608524c88-3.27.1

libndr-nbt0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libndr-standard0-4.10.18+git.269.dd608524c88-3.27.1

libndr-standard0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libndr0-4.10.18+git.269.dd608524c88-3.27.1

libndr0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libnetapi0-4.10.18+git.269.dd608524c88-3.27.1

libnetapi0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsamba-credentials0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-credentials0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsamba-errors0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-errors0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsamba-hostconfig0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-hostconfig0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsamba-passdb0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-passdb0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsamba-util0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-util0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsamdb0-4.10.18+git.269.dd608524c88-3.27.1

libsamdb0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsmbclient0-4.10.18+git.269.dd608524c88-3.27.1

libsmbclient0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsmbconf0-4.10.18+git.269.dd608524c88-3.27.1

libsmbconf0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsmbldap2-4.10.18+git.269.dd608524c88-3.27.1

libsmbldap2-32bit-4.10.18+git.269.dd608524c88-3.27.1

libtevent-util0-4.10.18+git.269.dd608524c88-3.27.1

libtevent-util0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libwbclient0-4.10.18+git.269.dd608524c88-3.27.1

libwbclient0-32bit-4.10.18+git.269.dd608524c88-3.27.1

samba-4.10.18+git.269.dd608524c88-3.27.1

samba-client-4.10.18+git.269.dd608524c88-3.27.1

samba-client-32bit-4.10.18+git.269.dd608524c88-3.27.1

samba-doc-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-32bit-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-python3-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-python3-32bit-4.10.18+git.269.dd608524c88-3.27.1

samba-winbind-4.10.18+git.269.dd608524c88-3.27.1

samba-winbind-32bit-4.10.18+git.269.dd608524c88-3.27.1

SUSE Linux Enterprise Server for SAP Applications 12 SP5

libdcerpc-binding0-4.10.18+git.269.dd608524c88-3.27.1

libdcerpc-binding0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libdcerpc0-4.10.18+git.269.dd608524c88-3.27.1

libdcerpc0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libndr-krb5pac0-4.10.18+git.269.dd608524c88-3.27.1

libndr-krb5pac0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libndr-nbt0-4.10.18+git.269.dd608524c88-3.27.1

libndr-nbt0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libndr-standard0-4.10.18+git.269.dd608524c88-3.27.1

libndr-standard0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libndr0-4.10.18+git.269.dd608524c88-3.27.1

libndr0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libnetapi0-4.10.18+git.269.dd608524c88-3.27.1

libnetapi0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsamba-credentials0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-credentials0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsamba-errors0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-errors0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsamba-hostconfig0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-hostconfig0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsamba-passdb0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-passdb0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsamba-util0-4.10.18+git.269.dd608524c88-3.27.1

libsamba-util0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsamdb0-4.10.18+git.269.dd608524c88-3.27.1

libsamdb0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsmbclient0-4.10.18+git.269.dd608524c88-3.27.1

libsmbclient0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsmbconf0-4.10.18+git.269.dd608524c88-3.27.1

libsmbconf0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libsmbldap2-4.10.18+git.269.dd608524c88-3.27.1

libsmbldap2-32bit-4.10.18+git.269.dd608524c88-3.27.1

libtevent-util0-4.10.18+git.269.dd608524c88-3.27.1

libtevent-util0-32bit-4.10.18+git.269.dd608524c88-3.27.1

libwbclient0-4.10.18+git.269.dd608524c88-3.27.1

libwbclient0-32bit-4.10.18+git.269.dd608524c88-3.27.1

samba-4.10.18+git.269.dd608524c88-3.27.1

samba-client-4.10.18+git.269.dd608524c88-3.27.1

samba-client-32bit-4.10.18+git.269.dd608524c88-3.27.1

samba-doc-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-32bit-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-python3-4.10.18+git.269.dd608524c88-3.27.1

samba-libs-python3-32bit-4.10.18+git.269.dd608524c88-3.27.1

samba-winbind-4.10.18+git.269.dd608524c88-3.27.1

samba-winbind-32bit-4.10.18+git.269.dd608524c88-3.27.1

SUSE Linux Enterprise Software Development Kit 12 SP5

libndr-devel-4.10.18+git.269.dd608524c88-3.27.1

libndr-krb5pac-devel-4.10.18+git.269.dd608524c88-3.27.1

libndr-nbt-devel-4.10.18+git.269.dd608524c88-3.27.1

libndr-standard-devel-4.10.18+git.269.dd608524c88-3.27.1

libsamba-util-devel-4.10.18+git.269.dd608524c88-3.27.1

libsmbclient-devel-4.10.18+git.269.dd608524c88-3.27.1

libwbclient-devel-4.10.18+git.269.dd608524c88-3.27.1

samba-core-devel-4.10.18+git.269.dd608524c88-3.27.1

Ссылки

https://www.suse.com/support/update/announcement/2021/suse-su-20211438-1/
Link for SUSE-SU-2021:1438-1
https://lists.suse.com/pipermail/sle-security-updates/2021-April/008705.html
E-Mail link for SUSE-SU-2021:1438-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1178469
SUSE Bug 1178469
https://bugzilla.suse.com/1179156
SUSE Bug 1179156
https://bugzilla.suse.com/1184677
SUSE Bug 1184677
https://www.suse.com/security/cve/CVE-2021-20254/
SUSE CVE CVE-2021-20254 page

Описание

A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.

Затронутые продукты

Image SLES12-SP5-Azure-BYOS:samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-Azure-Basic-On-Demand:samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-Azure-HPC-BYOS:samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Image SLES12-SP5-Azure-HPC-On-Demand:samba-libs-4.10.18+git.269.dd608524c88-3.27.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-20254.html
CVE-2021-20254
https://bugzilla.suse.com/1184677
SUSE Bug 1184677
https://bugzilla.suse.com/1185886
SUSE Bug 1185886
https://bugzilla.suse.com/1189860
SUSE Bug 1189860

SUSE-SU-2021:1438-1

Описание

Список пакетов

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-OCI-BYOS-BYOS

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise High Availability Extension 12 SP5

SUSE Linux Enterprise Server 12 SP5

SUSE Linux Enterprise Server for SAP Applications 12 SP5

SUSE Linux Enterprise Software Development Kit 12 SP5

Ссылки

Уязвимость: CVE-2021-20254

Описание

Затронутые продукты

Ссылки