SUSE-SU-2023:0162-1

UNKNOWN

Security update for samba

Published Jan 26, 2023

Modified 3 years ago

Fix available

Details

This update for samba fixes the following issues:

CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to brute force a user's password (bsc#1206546).

Affected Packages(26 packages)

ctdb

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Availability Extension 15 SP3

Fixed in:

4.15.13+git.591.ab36624310c-150300.3.49.1

libsamba-policy-devel

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Real Time 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

4.15.13+git.591.ab36624310c-150300.3.49.1

libsamba-policy-python3-devel

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Real Time 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

4.15.13+git.591.ab36624310c-150300.3.49.1

libsamba-policy0-python3

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Real Time 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

4.15.13+git.591.ab36624310c-150300.3.49.1

samba

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Availability Extension 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Micro 5.2

Fixed in:

4.15.13+git.591.ab36624310c-150300.3.49.1

samba-ad-dc-libs

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Real Time 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

4.15.13+git.591.ab36624310c-150300.3.49.1

samba-ad-dc-libs-32bit

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Real Time 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

4.15.13+git.591.ab36624310c-150300.3.49.1

samba-ceph

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Real Time 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

4.15.13+git.591.ab36624310c-150300.3.49.1

samba-client

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Real Time 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

4.15.13+git.591.ab36624310c-150300.3.49.1

samba-client-32bit

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Real Time 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

4.15.13+git.591.ab36624310c-150300.3.49.1

References

https://bugzilla.suse.com/1206504

https://bugzilla.suse.com/1206546

https://www.suse.com/security/cve/CVE-2021-20251

https://www.suse.com/security/cve/CVE-2022-38023

https://www.suse.com/support/update/announcement/2023/suse-su-20230162-1/

Upstream

CVE-2021-20251 CVE-2022-38023

Related

CVE-2021-20251 CVE-2022-38023

Ecosystems(12)

SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Availability Extension 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Micro 5.2

Timeline

PublishedJan 26, 2023

ModifiedJan 26, 2023

SUSE-SU-2023:0162-1 | Mondoo Vulnerability Intelligence