SUSE-SU-2019:3318-1

UNKNOWN

Security update for samba

Published Dec 17, 2019

Modified 6 years ago

Fix available

Details

This update for samba fixes the following issues:

CVE-2019-14861: Fixed a DNSServer RPC server crash, that allowed an authenticated user to crash the DCE/RPC DNS management server by creating records with matching the zone name (bsc#1158108).
CVE-2019-14870: Fixed a DelegationNotAllowed not being enforced (bsc#1158109).

Affected Packages(67 packages)

ctdb

SUSE Linux Enterprise High Availability Extension 15

Fixed in:

4.7.11+git.202.6edee83fb34-4.34.1

samba

SUSE Linux Enterprise High Availability Extension 15SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Package Hub 15

Fixed in:

4.7.11+git.202.6edee83fb34-4.34.1

libdcerpc-binding0

SUSE Linux Enterprise Module for Basesystem 15

Fixed in:

4.7.11+git.202.6edee83fb34-4.34.1

libdcerpc-binding0-32bit

SUSE Linux Enterprise Module for Basesystem 15

Fixed in:

4.7.11+git.202.6edee83fb34-4.34.1

libdcerpc-devel

SUSE Linux Enterprise Module for Basesystem 15

Fixed in:

4.7.11+git.202.6edee83fb34-4.34.1

libdcerpc-samr-devel

SUSE Linux Enterprise Module for Basesystem 15

Fixed in:

4.7.11+git.202.6edee83fb34-4.34.1

libdcerpc-samr0

SUSE Linux Enterprise Module for Basesystem 15

Fixed in:

4.7.11+git.202.6edee83fb34-4.34.1

libdcerpc0

SUSE Linux Enterprise Module for Basesystem 15

Fixed in:

4.7.11+git.202.6edee83fb34-4.34.1

libdcerpc0-32bit

SUSE Linux Enterprise Module for Basesystem 15

Fixed in:

4.7.11+git.202.6edee83fb34-4.34.1

libndr-devel

SUSE Linux Enterprise Module for Basesystem 15

Fixed in:

4.7.11+git.202.6edee83fb34-4.34.1

References

https://bugzilla.suse.com/1158108

https://bugzilla.suse.com/1158109

https://www.suse.com/security/cve/CVE-2019-14861

https://www.suse.com/security/cve/CVE-2019-14870

https://www.suse.com/support/update/announcement/2019/suse-su-20193318-1/

Upstream

CVE-2019-14861 CVE-2019-14870

Related

CVE-2019-14861 CVE-2019-14870

Ecosystems

SUSE Linux Enterprise High Availability Extension 15 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Package Hub 15

Timeline

PublishedDec 17, 2019

ModifiedDec 17, 2019

SUSE-SU-2019:3318-1 | Mondoo Vulnerability Intelligence