SUSE-SU-2022:3955-1

Опубликовано: 11 нояб. 2022

Источник: suse-cvrf

Описание

Security update for samba

This update for samba fixes the following issues:

CVE-2022-1615: Fixed error handling in random number generation (bso#15103)(bsc#1202976).
CVE-2022-32743: Implement validated dnsHostName write rights (bso#14833)(bsc#1202803).

Bugfixes:

Fixed use after free when iterating smbd_server_connection->connections after tree disconnect failure (bso#15128)(bsc#1200102).

Список пакетов

Image SLES15-SP3-BYOS-Azure

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-BYOS-EC2-HVM

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-BYOS-GCE

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-CHOST-BYOS-Aliyun

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-CHOST-BYOS-Azure

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-CHOST-BYOS-EC2

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-CHOST-BYOS-GCE

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-HPC-BYOS-Azure

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-HPC-BYOS-EC2-HVM

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-HPC-BYOS-GCE

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

ctdb-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

ctdb-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-SAP-BYOS-Azure

ctdb-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-SAP-BYOS-EC2-HVM

ctdb-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-SAP-BYOS-GCE

ctdb-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-SAPCAL-Azure

samba-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-SAPCAL-EC2-HVM

samba-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-SAPCAL-GCE

samba-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

SUSE Enterprise Storage 7.1

ctdb-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-ceph-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-python3-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-winbind-4.15.8+git.527.8d0c05d313e-150300.3.40.2

SUSE Linux Enterprise High Availability Extension 15 SP3

ctdb-4.15.8+git.527.8d0c05d313e-150300.3.40.2

SUSE Linux Enterprise Micro 5.2

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

SUSE Linux Enterprise Module for Basesystem 15 SP3

libsamba-policy-devel-4.15.8+git.527.8d0c05d313e-150300.3.40.2

libsamba-policy-python3-devel-4.15.8+git.527.8d0c05d313e-150300.3.40.2

libsamba-policy0-python3-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-ad-dc-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-ad-dc-libs-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-ceph-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-devel-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-devel-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-dsdb-modules-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-gpupdate-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-ldb-ldap-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-python3-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-python3-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-tool-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-winbind-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-winbind-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-winbind-libs-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

SUSE Linux Enterprise Module for Python 2 15 SP3

samba-ad-dc-4.15.8+git.527.8d0c05d313e-150300.3.40.2

openSUSE Leap 15.3

ctdb-4.15.8+git.527.8d0c05d313e-150300.3.40.2

ctdb-pcp-pmda-4.15.8+git.527.8d0c05d313e-150300.3.40.2

libsamba-policy-devel-4.15.8+git.527.8d0c05d313e-150300.3.40.2

libsamba-policy-python3-devel-4.15.8+git.527.8d0c05d313e-150300.3.40.2

libsamba-policy0-python3-4.15.8+git.527.8d0c05d313e-150300.3.40.2

libsamba-policy0-python3-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

libsamba-policy0-python3-64bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-ad-dc-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-ad-dc-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-ad-dc-libs-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-ceph-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-64bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-client-libs-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-devel-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-devel-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-doc-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-dsdb-modules-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-gpupdate-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-ldb-ldap-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-64bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-python3-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-python3-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-libs-python3-64bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-python3-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-test-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-tool-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-winbind-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-winbind-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

samba-winbind-libs-32bit-4.15.8+git.527.8d0c05d313e-150300.3.40.2

openSUSE Leap Micro 5.2

samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20223955-1/
Link for SUSE-SU-2022:3955-1
https://lists.suse.com/pipermail/sle-security-updates/2022-November/012905.html
E-Mail link for SUSE-SU-2022:3955-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1200102
SUSE Bug 1200102
https://bugzilla.suse.com/1202803
SUSE Bug 1202803
https://bugzilla.suse.com/1202976
SUSE Bug 1202976
https://www.suse.com/security/cve/CVE-2022-1615/
SUSE CVE CVE-2022-1615 page
https://www.suse.com/security/cve/CVE-2022-32743/
SUSE CVE CVE-2022-32743 page

Описание

In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.

Затронутые продукты

Image SLES15-SP3-BYOS-Azure:samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-BYOS-EC2-HVM:samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-BYOS-GCE:samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-CHOST-BYOS-Aliyun:samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Ссылки

https://www.suse.com/security/cve/CVE-2022-1615.html
CVE-2022-1615
https://bugzilla.suse.com/1202976
SUSE Bug 1202976

Описание

Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it.

Затронутые продукты

Image SLES15-SP3-BYOS-Azure:samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-BYOS-EC2-HVM:samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-BYOS-GCE:samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Image SLES15-SP3-CHOST-BYOS-Aliyun:samba-client-libs-4.15.8+git.527.8d0c05d313e-150300.3.40.2

Ссылки

https://www.suse.com/security/cve/CVE-2022-32743.html
CVE-2022-32743
https://bugzilla.suse.com/1202803
SUSE Bug 1202803
https://bugzilla.suse.com/1209483
SUSE Bug 1209483

SUSE-SU-2022:3955-1

Описание

Список пакетов

Image SLES15-SP3-BYOS-Azure

Image SLES15-SP3-BYOS-EC2-HVM

Image SLES15-SP3-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-Aliyun

Image SLES15-SP3-CHOST-BYOS-Azure

Image SLES15-SP3-CHOST-BYOS-EC2

Image SLES15-SP3-CHOST-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

Image SLES15-SP3-HPC-BYOS-Azure

Image SLES15-SP3-HPC-BYOS-EC2-HVM

Image SLES15-SP3-HPC-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Availability Extension 15 SP3

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Module for Basesystem 15 SP3

SUSE Linux Enterprise Module for Python 2 15 SP3

openSUSE Leap 15.3

openSUSE Leap Micro 5.2

Ссылки

Уязвимость: CVE-2022-1615

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2022-32743

Описание

Затронутые продукты

Ссылки