Security update for samba SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:4066-1 Final 1 1 2018-12-10T14:57:58Z current 2018-12-10T14:57:58Z 2018-12-10T14:57:58Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for samba This update for samba fixes the following issues: Update to samba version 4.7.11. Security issues fixed: - CVE-2018-14629: Fixed CNAME loops in Samba AD DC DNS server (bsc#1116319). - CVE-2018-16841: Fixed segfault on PKINIT when mis-matching principal (bsc#1116320). - CVE-2018-16851: Fixed NULL pointer de-reference in Samba AD DC LDAP server (bsc#1116322). - CVE-2018-16853: Mark MIT support for the AD DC experimental (bsc#1116324). Non-security issues fixed: - Fixed do not take over stderr when there is no log file (bsc#1101499). - Fixed ctdb_mutex_ceph_rados_helper deadlock; (bsc#1102230). - Fixed ntlm authentications with 'winbind use default domain = yes'; (bsc#1068059). - Fixed idmap_rid to have primary group other than 'Domain Users'; (bsc#1087931). - Fixed windows domain with one way trust that was not working (bsc#1087303). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-Module-Basesystem-15-2018-2888,SUSE-SLE-Module-Development-Tools-OBS-15-2018-2888,SUSE-SLE-Module-Packagehub-Subpackages-15-2018-2888,SUSE-SLE-Product-HA-15-2018-2888 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20184066-1/ Link for SUSE-SU-2018:4066-1 https://lists.suse.com/pipermail/sle-security-updates/2018-December/004948.html E-Mail link for SUSE-SU-2018:4066-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1068059 SUSE Bug 1068059 https://bugzilla.suse.com/1087303 SUSE Bug 1087303 https://bugzilla.suse.com/1087931 SUSE Bug 1087931 https://bugzilla.suse.com/1101499 SUSE Bug 1101499 https://bugzilla.suse.com/1102230 SUSE Bug 1102230 https://bugzilla.suse.com/1116319 SUSE Bug 1116319 https://bugzilla.suse.com/1116320 SUSE Bug 1116320 https://bugzilla.suse.com/1116322 SUSE Bug 1116322 https://bugzilla.suse.com/1116324 SUSE Bug 1116324 https://www.suse.com/security/cve/CVE-2018-14629/ SUSE CVE CVE-2018-14629 page https://www.suse.com/security/cve/CVE-2018-16841/ SUSE CVE CVE-2018-16841 page https://www.suse.com/security/cve/CVE-2018-16851/ SUSE CVE CVE-2018-16851 page https://www.suse.com/security/cve/CVE-2018-16853/ SUSE CVE CVE-2018-16853 page SUSE Linux Enterprise High Availability Extension 15 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Package Hub 15 libdcerpc-binding0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libdcerpc-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libdcerpc-samr-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libdcerpc-samr0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libdcerpc0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libndr-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libndr-krb5pac-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libndr-krb5pac0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libndr-nbt-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libndr-nbt0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libndr-standard-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libndr-standard0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libndr0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libnetapi-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libnetapi0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamba-credentials-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamba-credentials0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamba-errors-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamba-errors0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamba-hostconfig-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamba-hostconfig0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamba-passdb-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamba-passdb0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamba-policy-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamba-policy0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamba-util-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamba-util0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamdb-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsamdb0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsmbclient-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsmbclient0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsmbconf-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsmbconf0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsmbldap-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libsmbldap2-4.7.11+git.140.6bd0e5b30d8-4.21.1 libtevent-util-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libtevent-util0-4.7.11+git.140.6bd0e5b30d8-4.21.1 libwbclient-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 libwbclient0-4.7.11+git.140.6bd0e5b30d8-4.21.1 samba-4.7.11+git.140.6bd0e5b30d8-4.21.1 samba-client-4.7.11+git.140.6bd0e5b30d8-4.21.1 samba-core-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 samba-libs-4.7.11+git.140.6bd0e5b30d8-4.21.1 samba-winbind-4.7.11+git.140.6bd0e5b30d8-4.21.1 samba-python-4.7.11+git.140.6bd0e5b30d8-4.21.1 ctdb-4.7.11+git.140.6bd0e5b30d8-4.21.1 ctdb-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise High Availability Extension 15 libdcerpc-binding0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libdcerpc-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libdcerpc-samr-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libdcerpc-samr0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libdcerpc0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-krb5pac-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-krb5pac0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-nbt-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-nbt0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-standard-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr-standard0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libndr0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libnetapi-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libnetapi0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-credentials-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-credentials0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-errors-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-errors0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-hostconfig-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-hostconfig0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-passdb-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-passdb0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-policy-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-policy0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-util-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamba-util0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamdb-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsamdb0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsmbclient-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsmbclient0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsmbconf-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsmbconf0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsmbldap-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libsmbldap2-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libtevent-util-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libtevent-util0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libwbclient-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 libwbclient0-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 samba-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 samba-client-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 samba-core-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 samba-libs-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 samba-winbind-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 samba-python-4.7.11+git.140.6bd0e5b30d8-4.21.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service. CVE-2018-14629 SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap2-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-client-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-core-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-libs-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-winbind-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Package Hub 15:samba-python-4.7.11+git.140.6bd0e5b30d8-4.21.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20184066-1/ https://www.suse.com/security/cve/CVE-2018-14629.html CVE-2018-14629 https://bugzilla.suse.com/1116319 SUSE Bug 1116319 Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process. CVE-2018-16841 SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap2-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-client-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-core-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-libs-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-winbind-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Package Hub 15:samba-python-4.7.11+git.140.6bd0e5b30d8-4.21.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20184066-1/ https://www.suse.com/security/cve/CVE-2018-16841.html CVE-2018-16841 https://bugzilla.suse.com/1116320 SUSE Bug 1116320 Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this size is reached, the Samba process providing the LDAP service will follow the NULL pointer, terminating the process. There is no further vulnerability associated with this issue, merely a denial of service. CVE-2018-16851 SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap2-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-client-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-core-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-libs-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-winbind-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Package Hub 15:samba-python-4.7.11+git.140.6bd0e5b30d8-4.21.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20184066-1/ https://www.suse.com/security/cve/CVE-2018-16851.html CVE-2018-16851 https://bugzilla.suse.com/1116322 SUSE Bug 1116322 Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command. CVE-2018-16853 SUSE Linux Enterprise High Availability Extension 15:ctdb-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-binding0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc-samr0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libdcerpc0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-krb5pac0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-nbt0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr-standard0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libndr0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libnetapi0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-credentials0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-errors0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-hostconfig0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-passdb0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-policy0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamba-util0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsamdb0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbclient0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbconf0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libsmbldap2-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libtevent-util0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:libwbclient0-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-client-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-core-devel-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-libs-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Basesystem 15:samba-winbind-4.7.11+git.140.6bd0e5b30d8-4.21.1 SUSE Linux Enterprise Module for Package Hub 15:samba-python-4.7.11+git.140.6bd0e5b30d8-4.21.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20184066-1/ https://www.suse.com/security/cve/CVE-2018-16853.html CVE-2018-16853 https://bugzilla.suse.com/1116324 SUSE Bug 1116324