Security update for samba SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:2318-1 Final 1 1 2018-08-14T09:53:11Z current 2018-08-14T09:53:11Z 2018-08-14T09:53:11Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for samba This update for samba fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-1139: Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048) - CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escapes crashes; (bsc#1095056) - CVE-2018-10919: Confidential attribute disclosure via substring search; (bsc#1095057) - CVE-2018-10858: smbc_urlencode helper function is a subject to buffer overflow; (bsc#1103411) - CVE-2018-10918: Fix NULL ptr dereference in DsCrackNames on a user without a SPN; (bsc#1103414) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-Module-Basesystem-15-2018-1555,SUSE-SLE-Product-HA-15-2018-1555 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20182318-1/ Link for SUSE-SU-2018:2318-1 https://lists.suse.com/pipermail/sle-security-updates/2018-August/004407.html E-Mail link for SUSE-SU-2018:2318-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1095048 SUSE Bug 1095048 https://bugzilla.suse.com/1095056 SUSE Bug 1095056 https://bugzilla.suse.com/1095057 SUSE Bug 1095057 https://bugzilla.suse.com/1103411 SUSE Bug 1103411 https://bugzilla.suse.com/1103414 SUSE Bug 1103414 https://www.suse.com/security/cve/CVE-2018-10858/ SUSE CVE CVE-2018-10858 page https://www.suse.com/security/cve/CVE-2018-10918/ SUSE CVE CVE-2018-10918 page https://www.suse.com/security/cve/CVE-2018-10919/ SUSE CVE CVE-2018-10919 page https://www.suse.com/security/cve/CVE-2018-1139/ SUSE CVE CVE-2018-1139 page https://www.suse.com/security/cve/CVE-2018-1140/ SUSE CVE CVE-2018-1140 page SUSE Linux Enterprise High Availability Extension 15 SUSE Linux Enterprise Module for Basesystem 15 libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-4.15.1 libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libdcerpc-samr0-4.7.8+git.86.94b6d10f7dd-4.15.1 libdcerpc0-4.7.8+git.86.94b6d10f7dd-4.15.1 libndr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libndr-krb5pac-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libndr-krb5pac0-4.7.8+git.86.94b6d10f7dd-4.15.1 libndr-nbt-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libndr-nbt0-4.7.8+git.86.94b6d10f7dd-4.15.1 libndr-standard-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libndr-standard0-4.7.8+git.86.94b6d10f7dd-4.15.1 libndr0-4.7.8+git.86.94b6d10f7dd-4.15.1 libnetapi-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libnetapi0-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamba-credentials-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamba-credentials0-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamba-errors-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamba-errors0-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamba-hostconfig-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamba-hostconfig0-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamba-passdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamba-passdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamba-policy-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamba-policy0-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamba-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamba-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libsamdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 libsmbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libsmbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 libsmbconf-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libsmbconf0-4.7.8+git.86.94b6d10f7dd-4.15.1 libsmbldap-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libsmbldap2-4.7.8+git.86.94b6d10f7dd-4.15.1 libtevent-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libtevent-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 libwbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 libwbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 samba-4.7.8+git.86.94b6d10f7dd-4.15.1 samba-client-4.7.8+git.86.94b6d10f7dd-4.15.1 samba-core-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 samba-libs-4.7.8+git.86.94b6d10f7dd-4.15.1 samba-winbind-4.7.8+git.86.94b6d10f7dd-4.15.1 ctdb-4.7.8+git.86.94b6d10f7dd-4.15.1 ctdb-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise High Availability Extension 15 libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libdcerpc-samr0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libdcerpc0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-krb5pac-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-krb5pac0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-nbt-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-nbt0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-standard-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-standard0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libnetapi-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libnetapi0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-credentials-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-credentials0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-errors-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-errors0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-hostconfig-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-hostconfig0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-passdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-passdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-policy-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-policy0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsmbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsmbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsmbconf-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsmbconf0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsmbldap-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsmbldap2-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libtevent-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libtevent-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libwbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libwbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 samba-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 samba-client-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 samba-core-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 samba-libs-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 samba-winbind-4.7.8+git.86.94b6d10f7dd-4.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable. CVE-2018-10858 SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap2-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-client-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-core-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-libs-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-winbind-4.7.8+git.86.94b6d10f7dd-4.15.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182318-1/ https://www.suse.com/security/cve/CVE-2018-10858.html CVE-2018-10858 https://bugzilla.suse.com/1103411 SUSE Bug 1103411 https://bugzilla.suse.com/1110943 SUSE Bug 1110943 A null pointer dereference flaw was found in the way samba checked database outputs from the LDB database layer. An authenticated attacker could use this flaw to crash a samba server in an Active Directory Domain Controller configuration. Samba versions before 4.7.9 and 4.8.4 are vulnerable. CVE-2018-10918 SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap2-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-client-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-core-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-libs-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-winbind-4.7.8+git.86.94b6d10f7dd-4.15.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182318-1/ https://www.suse.com/security/cve/CVE-2018-10918.html CVE-2018-10918 https://bugzilla.suse.com/1103414 SUSE Bug 1103414 The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable. CVE-2018-10919 SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap2-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-client-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-core-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-libs-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-winbind-4.7.8+git.86.94b6d10f7dd-4.15.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182318-1/ https://www.suse.com/security/cve/CVE-2018-10919.html CVE-2018-10919 https://bugzilla.suse.com/1095057 SUSE Bug 1095057 https://bugzilla.suse.com/1110943 SUSE Bug 1110943 https://bugzilla.suse.com/1209485 SUSE Bug 1209485 A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client. CVE-2018-1139 SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap2-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-client-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-core-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-libs-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-winbind-4.7.8+git.86.94b6d10f7dd-4.15.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182318-1/ https://www.suse.com/security/cve/CVE-2018-1139.html CVE-2018-1139 https://bugzilla.suse.com/1095048 SUSE Bug 1095048 A missing input sanitization flaw was found in the implementation of LDP database used for the LDAP server. An attacker could use this flaw to cause a denial of service against a samba server, used as a Active Directory Domain Controller. All versions of Samba from 4.8.0 onwards are vulnerable CVE-2018-1140 SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libndr0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap2-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient0-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-client-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-core-devel-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-libs-4.7.8+git.86.94b6d10f7dd-4.15.1 SUSE Linux Enterprise Module for Basesystem 15:samba-winbind-4.7.8+git.86.94b6d10f7dd-4.15.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182318-1/ https://www.suse.com/security/cve/CVE-2018-1140.html CVE-2018-1140 https://bugzilla.suse.com/1095056 SUSE Bug 1095056