SUSE-SU-2021:3187-1

Опубликовано: 22 сент. 2021

Источник: suse-cvrf

Описание

Security update for samba

This update for samba fixes the following issues:

CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574).
CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677).
CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572).
Spec file fixes around systemd and requires (bsc#1182830)
Fix dependency problem upgrading from libndr0 to libndr1 (bsc#1189875)
Fix dependency problem upgrading from libsmbldap0 to libsmbldap2 (bsc#1189875)

Список пакетов

Image SLES15-SP3-EC2-HVM

samba-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-32bit-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-SAP-Azure

samba-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-32bit-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

ctdb-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

ctdb-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-SAP-BYOS-Azure

ctdb-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

ctdb-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-SAP-BYOS-GCE

ctdb-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-SAP-EC2-HVM

samba-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-32bit-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-SAP-GCE

samba-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-32bit-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-SAPCAL-Azure

samba-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-32bit-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-SAPCAL-EC2-HVM

samba-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-32bit-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-SAPCAL-GCE

samba-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-32bit-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

SUSE Linux Enterprise High Availability Extension 15 SP3

ctdb-4.13.6+git.211.555d60b24ba-3.7.1

SUSE Linux Enterprise Module for Basesystem 15 SP3

libdcerpc-binding0-4.13.6+git.211.555d60b24ba-3.7.1

libdcerpc-binding0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libdcerpc-devel-4.13.6+git.211.555d60b24ba-3.7.1

libdcerpc-samr-devel-4.13.6+git.211.555d60b24ba-3.7.1

libdcerpc-samr0-4.13.6+git.211.555d60b24ba-3.7.1

libdcerpc0-4.13.6+git.211.555d60b24ba-3.7.1

libdcerpc0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libndr-devel-4.13.6+git.211.555d60b24ba-3.7.1

libndr-krb5pac-devel-4.13.6+git.211.555d60b24ba-3.7.1

libndr-krb5pac0-4.13.6+git.211.555d60b24ba-3.7.1

libndr-krb5pac0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libndr-nbt-devel-4.13.6+git.211.555d60b24ba-3.7.1

libndr-nbt0-4.13.6+git.211.555d60b24ba-3.7.1

libndr-nbt0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libndr-standard-devel-4.13.6+git.211.555d60b24ba-3.7.1

libndr-standard0-4.13.6+git.211.555d60b24ba-3.7.1

libndr-standard0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libndr1-4.13.6+git.211.555d60b24ba-3.7.1

libndr1-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libnetapi-devel-4.13.6+git.211.555d60b24ba-3.7.1

libnetapi0-4.13.6+git.211.555d60b24ba-3.7.1

libnetapi0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-credentials-devel-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-credentials0-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-credentials0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-errors-devel-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-errors0-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-errors0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-hostconfig-devel-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-hostconfig0-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-hostconfig0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-passdb-devel-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-passdb0-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-passdb0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-policy-devel-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-policy-python3-devel-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-policy0-python3-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-util-devel-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-util0-4.13.6+git.211.555d60b24ba-3.7.1

libsamba-util0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libsamdb-devel-4.13.6+git.211.555d60b24ba-3.7.1

libsamdb0-4.13.6+git.211.555d60b24ba-3.7.1

libsamdb0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libsmbclient-devel-4.13.6+git.211.555d60b24ba-3.7.1

libsmbclient0-4.13.6+git.211.555d60b24ba-3.7.1

libsmbconf-devel-4.13.6+git.211.555d60b24ba-3.7.1

libsmbconf0-4.13.6+git.211.555d60b24ba-3.7.1

libsmbconf0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libsmbldap-devel-4.13.6+git.211.555d60b24ba-3.7.1

libsmbldap2-4.13.6+git.211.555d60b24ba-3.7.1

libsmbldap2-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libtevent-util-devel-4.13.6+git.211.555d60b24ba-3.7.1

libtevent-util0-4.13.6+git.211.555d60b24ba-3.7.1

libtevent-util0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

libwbclient-devel-4.13.6+git.211.555d60b24ba-3.7.1

libwbclient0-4.13.6+git.211.555d60b24ba-3.7.1

libwbclient0-32bit-4.13.6+git.211.555d60b24ba-3.7.1

samba-4.13.6+git.211.555d60b24ba-3.7.1

samba-ceph-4.13.6+git.211.555d60b24ba-3.7.1

samba-client-4.13.6+git.211.555d60b24ba-3.7.1

samba-core-devel-4.13.6+git.211.555d60b24ba-3.7.1

samba-dsdb-modules-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-32bit-4.13.6+git.211.555d60b24ba-3.7.1

samba-libs-python3-4.13.6+git.211.555d60b24ba-3.7.1

samba-python3-4.13.6+git.211.555d60b24ba-3.7.1

samba-winbind-4.13.6+git.211.555d60b24ba-3.7.1

samba-winbind-32bit-4.13.6+git.211.555d60b24ba-3.7.1

SUSE Linux Enterprise Module for Python 2 15 SP3

samba-ad-dc-4.13.6+git.211.555d60b24ba-3.7.1

Ссылки

https://www.suse.com/support/update/announcement/2021/suse-su-20213187-1/
Link for SUSE-SU-2021:3187-1
https://lists.suse.com/pipermail/sle-security-updates/2021-September/009483.html
E-Mail link for SUSE-SU-2021:3187-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1182830
SUSE Bug 1182830
https://bugzilla.suse.com/1183572
SUSE Bug 1183572
https://bugzilla.suse.com/1183574
SUSE Bug 1183574
https://bugzilla.suse.com/1184677
SUSE Bug 1184677
https://bugzilla.suse.com/1189875
SUSE Bug 1189875
https://www.suse.com/security/cve/CVE-2020-27840/
SUSE CVE CVE-2020-27840 page
https://www.suse.com/security/cve/CVE-2021-20254/
SUSE CVE CVE-2021-20254 page
https://www.suse.com/security/cve/CVE-2021-20277/
SUSE CVE CVE-2021-20277 page

Описание

A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability.

Затронутые продукты

Image SLES15-SP3-EC2-HVM:samba-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-EC2-HVM:samba-client-32bit-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-EC2-HVM:samba-client-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-EC2-HVM:samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-27840.html
CVE-2020-27840
https://bugzilla.suse.com/1183572
SUSE Bug 1183572

Описание

A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.

Затронутые продукты

Image SLES15-SP3-EC2-HVM:samba-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-EC2-HVM:samba-client-32bit-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-EC2-HVM:samba-client-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-EC2-HVM:samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-20254.html
CVE-2021-20254
https://bugzilla.suse.com/1184677
SUSE Bug 1184677
https://bugzilla.suse.com/1185886
SUSE Bug 1185886
https://bugzilla.suse.com/1189860
SUSE Bug 1189860

Описание

A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability.

Затронутые продукты

Image SLES15-SP3-EC2-HVM:samba-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-EC2-HVM:samba-client-32bit-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-EC2-HVM:samba-client-4.13.6+git.211.555d60b24ba-3.7.1

Image SLES15-SP3-EC2-HVM:samba-libs-4.13.6+git.211.555d60b24ba-3.7.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-20277.html
CVE-2021-20277
https://bugzilla.suse.com/1183574
SUSE Bug 1183574

SUSE-SU-2021:3187-1

Описание

Список пакетов

Image SLES15-SP3-EC2-HVM

Image SLES15-SP3-SAP-Azure

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

Image SLES15-SP3-SAP-EC2-HVM

Image SLES15-SP3-SAP-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Linux Enterprise High Availability Extension 15 SP3

SUSE Linux Enterprise Module for Basesystem 15 SP3

SUSE Linux Enterprise Module for Python 2 15 SP3

Ссылки

Уязвимость: CVE-2020-27840

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2021-20254

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2021-20277

Описание

Затронутые продукты

Ссылки