SUSE-SU-2020:1948-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2020/suse-su-20201948-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:1948-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2020:1948-1
Related
Published
2020-07-17T12:48:18Z
Modified
2020-07-17T12:48:18Z
Summary
Security update for ldb, samba
Details

This update for ldb, samba fixes the following issues:

Changes in samba: - Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (bsc#1173160). + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server with pagedresult or VLV; (bso#14402); (bsc#1173161) + CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC nbtserver; (bso#14417); (bsc#1173359). - Update to samba 4.11.10 + Fix segfault when using SMBCopendirctx() routine for share folder that contains incorrect symbols in any file name; (bso#14374). + vfsshadowcopy2 doesn't fail case looking in snapdirseverywhere mode; (bso#14350) + ldbldap: Fix off-by-one increment in lldbaddmsgattr; (bso#14413). + Malicous SMB1 server can crash libsmbclient; (bso#14366) + winbindd: Fix a use-after-free when winbind clients exit; (bso#14382) + ldb: Bump version to 2.0.11, LMDB databases can grow without bounds. (bso#14330) - Update to samba 4.11.9 + nmblib: Avoid undefined behaviour in handlenameptrs(); (bso#14242). + 'samba-tool group' commands do not handle group names with special chars correctly; (bso#14296). + smbd: avoid calling vfsfileidfromsbuf() if statinfo is not valid; (bso#14237). + Missing check for DMAPI offline status in async DOS attributes; (bso#14293). + smbd: Ignore set NTACL requests which contain S-1-5-88 NFS ACEs; (bso#14307). + vfsrecycle: Prevent flooding the log if we're called on non-existant paths; (bso#14316) + smbd mistakenly updates a file's write-time on close; (bso#14320). + RPC handles cannot be differentiated in source3 RPC server; (bso#14359). + librpc: Fix IDL for svcctlChangeServiceConfigW; (bso#14313). + nsswitch: Fix use-after-free causing segfault in pamdeletecred; (bso#14327). + Fix fruit:time machine max size on arm; (bso#13622) + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294). + ctdb: Fix a memleak; (bso#14348). + libsmb: Don't try to find posix stat info in SMBCgetatr(). + ctdb-tcp: Move free of inbound queue to TCP restart; (bso#14295); (bsc#1162680). + s3/librpc/crypto: Fix double free with unresolved credential cache; (bso#14344); (bsc#1169095) + s3:libads: Fix adsgetupn(); (bso#14336). + CTDB recovery corner cases can cause record resurrection and node banning; (bso#14294) + Starting ctdb node that was powered off hard before results in recovery loop; (bso#14295); (bsc#1162680). + ctdb-recoverd: Avoid dereferencing NULL rec->nodemap; (bso#14324) - Update to samba 4.11.8 + CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ; (bso#14331); (bsc#1169850); + CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC; (bso#14334); (bsc#1169851); - Update to samba 4.11.7 + s3: lib: nmblib. Clean up and harden nmb packet processing; (bso#14239). + s3: VFS: fullaudit. Use system sessioninfo if called from a temporary share definition; (bso#14283) + dsdb: Correctly handle memory in objectclassattrs; (bso#14258). + ldb: version 2.0.9, Samba 4.11 and later give incorrect results for SCOPEONE searches; (bso#14270) + auth: Fix CIDs 1458418 and 1458420 Null pointer dereferences; (bso#14247). + smbd: Handle EINTR from open(2) properly; (bso#14285) + winbind member (source3) fails local SAM auth with empty domain name; (bso#14247) + winbindd: Handling missing idmap in getgrgid(); (bso#14265). + lib:util: Log mkdir error on correct debug levels; (bso#14253). + wafsamba: Do not use 'rU' as the 'U' is deprecated in Python 3.9; (bso#14266). + ctdb-tcp: Make error handling for outbound connection consistent; (bso#14274). - Update to samba 4.11.6 + pygpo: Use correct method flags; (bso#14209). + vfscephsnapshots: Fix root relative path handling; (bso#14216); (bsc#1141320). + Avoiding bad call flags with python 3.8, using METHNOARGS instead of zero; (bso#14209). + source4/utils/oLschema2ldif: Include stdint.h before cmocka.h; (bso#14218). + docs-xml/winbindnssinfo: Clarify interaction with idmapad etc; (bso#14122). + smbd: Fix the build with clang; (bso#14251). + upgradedns: Ensure lmdb lock files linked; (bso#14199). + s3: VFS: glusterfs: Reset nlinks for symlink entries during readdir; (bso#14182). + smbcstat() doesn't return the correct stmode and also the uid/gid is not filled (SMBv1) file; (bso#14101). + librpc: Fix string length checking in ndrpullcharsettonull(); (bso#14219). + ctdb-scripts: Strip square brackets when gathering connection info; (bso#14227).

  • Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);

  • Installing: samba - samba-ad-dc.service does not exist and unit not found; (bsc#1171437);

  • Fix samba_winbind package is installing python3-base without python3 package; (bsc#1169521);

Changes in ldb: - Update to version 2.0.12 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159). + ldbldap: fix off-by-one increment in lldbaddmsgattr; (bso#14413). + lib/ldb: add unit test for ldbldap internal code. - Update to version 2.0.11 + lib ldb: lmdb init var before calling mdbreader_check. + lib ldb: lmdb clear stale readers on write txn start; (bso#14330). + ldb tests: Confirm lmdb free list handling

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP2 / ldb

Package

Name
ldb
Purl
purl:rpm/suse/ldb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.12-3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "samba-libs": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libdcerpc-binding0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-credentials0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-util0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libwbclient-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libtevent-util0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libdcerpc0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libnetapi-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-errors0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbconf-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-nbt0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libtevent-util0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-hostconfig-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamdb0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-passdb0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "python3-ldb-devel": "2.0.12-3.3.1",
            "libndr-nbt-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-libs-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libwbclient0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libdcerpc-samr0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamdb-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-winbind-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-errors0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libdcerpc0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libwbclient0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libnetapi0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-hostconfig0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-policy0-python3": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libdcerpc-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-errors-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-krb5pac0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-standard0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-libs-python3": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-krb5pac-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-python3": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libdcerpc-samr-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-nbt0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbclient0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "ldb-tools": "2.0.12-3.3.1",
            "libsamba-credentials0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbconf0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-krb5pac0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-hostconfig0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libldb2": "2.0.12-3.3.1",
            "libsamba-policy-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-util0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-credentials-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-passdb0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-passdb-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbldap2": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-client": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-core-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamdb0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-winbind": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libldb2-32bit": "2.0.12-3.3.1",
            "libtevent-util-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "python3-ldb": "2.0.12-3.3.1",
            "libsamba-util-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-policy-python3-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libldb-devel": "2.0.12-3.3.1",
            "libdcerpc-binding0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-standard-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbclient-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libnetapi0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbconf0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbldap2-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-standard0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbldap-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-ceph": "4.11.11+git.180.2cf3b203f07-4.5.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP2 / samba

Package

Name
samba
Purl
purl:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.11.11+git.180.2cf3b203f07-4.5.1

Ecosystem specific 

{
    "binaries": [
        {
            "samba-libs": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libdcerpc-binding0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-credentials0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-util0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libwbclient-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libtevent-util0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libdcerpc0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libnetapi-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-errors0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbconf-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-nbt0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libtevent-util0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-hostconfig-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamdb0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-passdb0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "python3-ldb-devel": "2.0.12-3.3.1",
            "libndr-nbt-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-libs-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libwbclient0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libdcerpc-samr0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamdb-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-winbind-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-errors0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libdcerpc0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libwbclient0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libnetapi0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-hostconfig0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-policy0-python3": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libdcerpc-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-errors-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-krb5pac0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-standard0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-libs-python3": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-krb5pac-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-python3": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libdcerpc-samr-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-nbt0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbclient0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "ldb-tools": "2.0.12-3.3.1",
            "libsamba-credentials0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbconf0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-krb5pac0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-hostconfig0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libldb2": "2.0.12-3.3.1",
            "libsamba-policy-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-util0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-credentials-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-passdb0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-passdb-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbldap2": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-client": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-core-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamdb0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-winbind": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libldb2-32bit": "2.0.12-3.3.1",
            "libtevent-util-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "python3-ldb": "2.0.12-3.3.1",
            "libsamba-util-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsamba-policy-python3-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libldb-devel": "2.0.12-3.3.1",
            "libdcerpc-binding0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-standard-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbclient-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libnetapi0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbconf0": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbldap2-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libndr-standard0-32bit": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "libsmbldap-devel": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-ceph": "4.11.11+git.180.2cf3b203f07-4.5.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Python 2 15 SP2 / samba

Package

Name
samba
Purl
purl:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%202%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.11.11+git.180.2cf3b203f07-4.5.1

Ecosystem specific 

{
    "binaries": [
        {
            "samba-ad-dc": "4.11.11+git.180.2cf3b203f07-4.5.1",
            "samba-dsdb-modules": "4.11.11+git.180.2cf3b203f07-4.5.1"
        }
    ]
}

SUSE:Linux Enterprise High Availability Extension 15 SP2 / samba

Package

Name
samba
Purl
purl:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.11.11+git.180.2cf3b203f07-4.5.1

Ecosystem specific 

{
    "binaries": [
        {
            "ctdb": "4.11.11+git.180.2cf3b203f07-4.5.1"
        }
    ]
}