SUSE-SU-2023:0164-1

Опубликовано: 26 янв. 2023

Источник: suse-cvrf

Описание

Security update for samba

This update for samba fixes the following issues:

CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to brute force a user's password (bsc#1206546).
CVE-2022-37966: Fixed an issue where a weak cipher would be selected to encrypt session keys, which could lead to privilege escalation (bsc#1205385).

Список пакетов

Image SLES12-SP5-Azure-BYOS

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-Basic-On-Demand

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-HPC-BYOS

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-HPC-On-Demand

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-SAP-BYOS

ctdb-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-SAP-On-Demand

ctdb-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-Standard-On-Demand

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-EC2-BYOS

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-EC2-ECS-On-Demand

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-EC2-On-Demand

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-EC2-SAP-BYOS

ctdb-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-EC2-SAP-On-Demand

ctdb-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-GCE-BYOS

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-GCE-On-Demand

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-GCE-SAP-BYOS

ctdb-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-GCE-SAP-On-Demand

ctdb-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

ctdb-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

ctdb-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

SUSE Linux Enterprise High Availability Extension 12 SP5

ctdb-4.15.13+git.534.0d9f8ece26-3.77.1

SUSE Linux Enterprise Server 12 SP5

libsamba-policy-python3-devel-4.15.13+git.534.0d9f8ece26-3.77.1

libsamba-policy0-python3-4.15.13+git.534.0d9f8ece26-3.77.1

libsamba-policy0-python3-32bit-4.15.13+git.534.0d9f8ece26-3.77.1

samba-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-32bit-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-libs-32bit-4.15.13+git.534.0d9f8ece26-3.77.1

samba-devel-4.15.13+git.534.0d9f8ece26-3.77.1

samba-doc-4.15.13+git.534.0d9f8ece26-3.77.1

samba-ldb-ldap-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-32bit-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-python3-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-python3-32bit-4.15.13+git.534.0d9f8ece26-3.77.1

samba-python3-4.15.13+git.534.0d9f8ece26-3.77.1

samba-tool-4.15.13+git.534.0d9f8ece26-3.77.1

samba-winbind-4.15.13+git.534.0d9f8ece26-3.77.1

samba-winbind-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-winbind-libs-32bit-4.15.13+git.534.0d9f8ece26-3.77.1

SUSE Linux Enterprise Server for SAP Applications 12 SP5

libsamba-policy-python3-devel-4.15.13+git.534.0d9f8ece26-3.77.1

libsamba-policy0-python3-4.15.13+git.534.0d9f8ece26-3.77.1

libsamba-policy0-python3-32bit-4.15.13+git.534.0d9f8ece26-3.77.1

samba-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-32bit-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-client-libs-32bit-4.15.13+git.534.0d9f8ece26-3.77.1

samba-devel-4.15.13+git.534.0d9f8ece26-3.77.1

samba-doc-4.15.13+git.534.0d9f8ece26-3.77.1

samba-ldb-ldap-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-32bit-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-python3-4.15.13+git.534.0d9f8ece26-3.77.1

samba-libs-python3-32bit-4.15.13+git.534.0d9f8ece26-3.77.1

samba-python3-4.15.13+git.534.0d9f8ece26-3.77.1

samba-tool-4.15.13+git.534.0d9f8ece26-3.77.1

samba-winbind-4.15.13+git.534.0d9f8ece26-3.77.1

samba-winbind-libs-4.15.13+git.534.0d9f8ece26-3.77.1

samba-winbind-libs-32bit-4.15.13+git.534.0d9f8ece26-3.77.1

SUSE Linux Enterprise Software Development Kit 12 SP5

libsamba-policy-devel-4.15.13+git.534.0d9f8ece26-3.77.1

libsamba-policy-python3-devel-4.15.13+git.534.0d9f8ece26-3.77.1

samba-devel-4.15.13+git.534.0d9f8ece26-3.77.1

samba-devel-32bit-4.15.13+git.534.0d9f8ece26-3.77.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20230164-1/
Link for SUSE-SU-2023:0164-1
https://lists.suse.com/pipermail/sle-security-updates/2023-January/013544.html
E-Mail link for SUSE-SU-2023:0164-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1205385
SUSE Bug 1205385
https://bugzilla.suse.com/1206504
SUSE Bug 1206504
https://bugzilla.suse.com/1206546
SUSE Bug 1206546
https://www.suse.com/security/cve/CVE-2021-20251/
SUSE CVE CVE-2021-20251 page
https://www.suse.com/security/cve/CVE-2022-37966/
SUSE CVE CVE-2022-37966 page
https://www.suse.com/security/cve/CVE-2022-38023/
SUSE CVE CVE-2022-38023 page

Описание

A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.

Затронутые продукты

Image SLES12-SP5-Azure-BYOS:samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-BYOS:samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-Basic-On-Demand:samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-Basic-On-Demand:samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-20251.html
CVE-2021-20251
https://bugzilla.suse.com/1206546
SUSE Bug 1206546
https://bugzilla.suse.com/1208433
SUSE Bug 1208433
https://bugzilla.suse.com/1209325
SUSE Bug 1209325
https://bugzilla.suse.com/1209664
SUSE Bug 1209664

Описание

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

Затронутые продукты

Image SLES12-SP5-Azure-BYOS:samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-BYOS:samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-Basic-On-Demand:samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-Basic-On-Demand:samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-37966.html
CVE-2022-37966
https://bugzilla.suse.com/1205385
SUSE Bug 1205385
https://bugzilla.suse.com/1208347
SUSE Bug 1208347
https://bugzilla.suse.com/1208433
SUSE Bug 1208433
https://bugzilla.suse.com/1209664
SUSE Bug 1209664

Описание

Netlogon RPC Elevation of Privilege Vulnerability

Затронутые продукты

Image SLES12-SP5-Azure-BYOS:samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-BYOS:samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-Basic-On-Demand:samba-client-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Image SLES12-SP5-Azure-Basic-On-Demand:samba-libs-4.15.13+git.534.0d9f8ece26-3.77.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-38023.html
CVE-2022-38023
https://bugzilla.suse.com/1206504
SUSE Bug 1206504
https://bugzilla.suse.com/1209664
SUSE Bug 1209664
https://bugzilla.suse.com/1213694
SUSE Bug 1213694

SUSE-SU-2023:0164-1

Описание

Список пакетов

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise High Availability Extension 12 SP5

SUSE Linux Enterprise Server 12 SP5

SUSE Linux Enterprise Server for SAP Applications 12 SP5

SUSE Linux Enterprise Software Development Kit 12 SP5

Ссылки

Уязвимость: CVE-2021-20251

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2022-37966

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2022-38023

Описание

Затронутые продукты

Ссылки