Security update for samba SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:2321-1 Final 1 1 2018-08-14T12:40:53Z current 2018-08-14T12:40:53Z 2018-08-14T12:40:53Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for samba This update for samba fixes the following issues: Security issues fixed: - CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally (bsc#1081741). - CVE-2017-14746: Fixed use-after-free vulnerability (bsc#1060427). - CVE-2017-15275: Fixed server heap memory information leak (bsc#1063008). - CVE-2018-10858: smbc_urlencode helper function is a subject to buffer overflow (bsc#1103411) Bug fixes: - bsc#1027593: Update 'winbind expand groups' doc in smb.conf man page. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-HA-12-2018-1559,SUSE-SLE-SERVER-12-2018-1559 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20182321-1/ Link for SUSE-SU-2018:2321-1 https://lists.suse.com/pipermail/sle-security-updates/2018-August/004410.html E-Mail link for SUSE-SU-2018:2321-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1027593 SUSE Bug 1027593 https://bugzilla.suse.com/1060427 SUSE Bug 1060427 https://bugzilla.suse.com/1063008 SUSE Bug 1063008 https://bugzilla.suse.com/1081741 SUSE Bug 1081741 https://bugzilla.suse.com/1103411 SUSE Bug 1103411 https://www.suse.com/security/cve/CVE-2017-14746/ SUSE CVE CVE-2017-14746 page https://www.suse.com/security/cve/CVE-2017-15275/ SUSE CVE CVE-2017-15275 page https://www.suse.com/security/cve/CVE-2018-1050/ SUSE CVE CVE-2018-1050 page https://www.suse.com/security/cve/CVE-2018-10858/ SUSE CVE CVE-2018-10858 page SUSE Linux Enterprise High Availability Extension 12 SUSE Linux Enterprise Server 12-LTSS ctdb-4.2.4-18.49.1 libdcerpc-binding0-4.2.4-18.49.1 libdcerpc-binding0-32bit-4.2.4-18.49.1 libdcerpc0-4.2.4-18.49.1 libdcerpc0-32bit-4.2.4-18.49.1 libgensec0-4.2.4-18.49.1 libgensec0-32bit-4.2.4-18.49.1 libndr-krb5pac0-4.2.4-18.49.1 libndr-krb5pac0-32bit-4.2.4-18.49.1 libndr-nbt0-4.2.4-18.49.1 libndr-nbt0-32bit-4.2.4-18.49.1 libndr-standard0-4.2.4-18.49.1 libndr-standard0-32bit-4.2.4-18.49.1 libndr0-4.2.4-18.49.1 libndr0-32bit-4.2.4-18.49.1 libnetapi0-4.2.4-18.49.1 libnetapi0-32bit-4.2.4-18.49.1 libregistry0-4.2.4-18.49.1 libsamba-credentials0-4.2.4-18.49.1 libsamba-credentials0-32bit-4.2.4-18.49.1 libsamba-hostconfig0-4.2.4-18.49.1 libsamba-hostconfig0-32bit-4.2.4-18.49.1 libsamba-passdb0-4.2.4-18.49.1 libsamba-passdb0-32bit-4.2.4-18.49.1 libsamba-util0-4.2.4-18.49.1 libsamba-util0-32bit-4.2.4-18.49.1 libsamdb0-4.2.4-18.49.1 libsamdb0-32bit-4.2.4-18.49.1 libsmbclient-raw0-4.2.4-18.49.1 libsmbclient-raw0-32bit-4.2.4-18.49.1 libsmbclient0-4.2.4-18.49.1 libsmbclient0-32bit-4.2.4-18.49.1 libsmbconf0-4.2.4-18.49.1 libsmbconf0-32bit-4.2.4-18.49.1 libsmbldap0-4.2.4-18.49.1 libsmbldap0-32bit-4.2.4-18.49.1 libtevent-util0-4.2.4-18.49.1 libtevent-util0-32bit-4.2.4-18.49.1 libwbclient0-4.2.4-18.49.1 libwbclient0-32bit-4.2.4-18.49.1 samba-4.2.4-18.49.1 samba-32bit-4.2.4-18.49.1 samba-client-4.2.4-18.49.1 samba-client-32bit-4.2.4-18.49.1 samba-doc-4.2.4-18.49.1 samba-libs-4.2.4-18.49.1 samba-libs-32bit-4.2.4-18.49.1 samba-winbind-4.2.4-18.49.1 samba-winbind-32bit-4.2.4-18.49.1 ctdb-4.2.4-18.49.1 as a component of SUSE Linux Enterprise High Availability Extension 12 ctdb-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libdcerpc-binding0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libdcerpc-binding0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libdcerpc0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libdcerpc0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libgensec0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libgensec0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr-krb5pac0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr-krb5pac0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr-nbt0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr-nbt0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr-standard0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr-standard0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libndr0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libnetapi0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libnetapi0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libregistry0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-credentials0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-credentials0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-hostconfig0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-hostconfig0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-passdb0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-passdb0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-util0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamba-util0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamdb0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsamdb0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbclient-raw0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbclient-raw0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbclient0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbclient0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbconf0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbconf0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbldap0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libsmbldap0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libtevent-util0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libtevent-util0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libwbclient0-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS libwbclient0-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-client-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-client-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-doc-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-libs-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-libs-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-winbind-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS samba-winbind-32bit-4.2.4-18.49.1 as a component of SUSE Linux Enterprise Server 12-LTSS Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request. CVE-2017-14746 SUSE Linux Enterprise High Availability Extension 12:ctdb-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:ctdb-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc-binding0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc-binding0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libgensec0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libgensec0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-krb5pac0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-krb5pac0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-nbt0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-nbt0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-standard0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-standard0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libnetapi0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libnetapi0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libregistry0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-credentials0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-credentials0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-hostconfig0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-hostconfig0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-passdb0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-passdb0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-util0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-util0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamdb0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamdb0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient-raw0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient-raw0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbconf0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbconf0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbldap0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbldap0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libtevent-util0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libtevent-util0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libwbclient0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libwbclient0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-client-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-client-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-doc-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-libs-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-libs-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-winbind-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-winbind-4.2.4-18.49.1 important 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182321-1/ https://www.suse.com/security/cve/CVE-2017-14746.html CVE-2017-14746 https://bugzilla.suse.com/1060427 SUSE Bug 1060427 https://bugzilla.suse.com/1069666 SUSE Bug 1069666 Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory. CVE-2017-15275 SUSE Linux Enterprise High Availability Extension 12:ctdb-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:ctdb-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc-binding0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc-binding0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libgensec0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libgensec0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-krb5pac0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-krb5pac0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-nbt0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-nbt0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-standard0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-standard0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libnetapi0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libnetapi0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libregistry0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-credentials0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-credentials0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-hostconfig0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-hostconfig0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-passdb0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-passdb0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-util0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-util0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamdb0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamdb0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient-raw0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient-raw0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbconf0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbconf0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbldap0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbldap0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libtevent-util0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libtevent-util0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libwbclient0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libwbclient0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-client-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-client-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-doc-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-libs-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-libs-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-winbind-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-winbind-4.2.4-18.49.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182321-1/ https://www.suse.com/security/cve/CVE-2017-15275.html CVE-2017-15275 https://bugzilla.suse.com/1063008 SUSE Bug 1063008 https://bugzilla.suse.com/1069666 SUSE Bug 1069666 All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash. CVE-2018-1050 SUSE Linux Enterprise High Availability Extension 12:ctdb-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:ctdb-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc-binding0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc-binding0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libgensec0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libgensec0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-krb5pac0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-krb5pac0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-nbt0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-nbt0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-standard0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-standard0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libnetapi0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libnetapi0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libregistry0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-credentials0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-credentials0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-hostconfig0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-hostconfig0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-passdb0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-passdb0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-util0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-util0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamdb0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamdb0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient-raw0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient-raw0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbconf0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbconf0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbldap0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbldap0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libtevent-util0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libtevent-util0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libwbclient0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libwbclient0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-client-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-client-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-doc-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-libs-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-libs-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-winbind-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-winbind-4.2.4-18.49.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182321-1/ https://www.suse.com/security/cve/CVE-2018-1050.html CVE-2018-1050 https://bugzilla.suse.com/1081741 SUSE Bug 1081741 A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw to cause arbitrary code execution on a samba client. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable. CVE-2018-10858 SUSE Linux Enterprise High Availability Extension 12:ctdb-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:ctdb-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc-binding0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc-binding0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libdcerpc0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libgensec0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libgensec0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-krb5pac0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-krb5pac0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-nbt0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-nbt0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-standard0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr-standard0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libndr0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libnetapi0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libnetapi0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libregistry0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-credentials0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-credentials0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-hostconfig0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-hostconfig0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-passdb0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-passdb0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-util0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamba-util0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamdb0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsamdb0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient-raw0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient-raw0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbclient0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbconf0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbconf0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbldap0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libsmbldap0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libtevent-util0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libtevent-util0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libwbclient0-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:libwbclient0-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-client-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-client-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-doc-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-libs-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-libs-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-winbind-32bit-4.2.4-18.49.1 SUSE Linux Enterprise Server 12-LTSS:samba-winbind-4.2.4-18.49.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182321-1/ https://www.suse.com/security/cve/CVE-2018-10858.html CVE-2018-10858 https://bugzilla.suse.com/1103411 SUSE Bug 1103411 https://bugzilla.suse.com/1110943 SUSE Bug 1110943