SUSE-SU-2023:2930-1: Security update for samba
This update for samba fixes the following issues: CVE-2022-2127: Fixed issue where lmresplen was not checked properly in winbinddpamauthcrapsend (bsc#1213174). CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability (bsc#1213173). CVE-2023-34967: Fixed samba spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability (bsc#1213172). CVE-2023-34968: Fixed spotlight server-side Share Path Disclosure (bsc#1213171). Bugfixes: Fixed trust relationship failure (bsc#1213384).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/ctdbto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-libsto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-debugsourceto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-toolto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/ctdb-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-client-libs-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/sambato a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-dsdb-modulesto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-winbind-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-testto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/libsamba-policy0-python3-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/ctdb-pcp-pmdato a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-python3to a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/libsamba-policy-python3-develto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-libs-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-develto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-gpupdateto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-ldb-ldap-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-winbindto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-client-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-libs-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-libs-python3-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-ldb-ldapto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-winbind-libs-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/ctdb-pcp-pmda-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/libsamba-policy-develto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-python3-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-test-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-ad-dcto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-dsdb-modules-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-develto a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-libsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-libsto a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-docto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-cephto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-ceph-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-libsto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-develto a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-libsto a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2023-2930=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-2930=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.3-2023-2930=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.4-2023-2930=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-2930=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HA-15-SP4-2023-2930=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.3-2023-2930=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.4-2023-2930=1
Event History
Child vulnerabilities
Contains the following vulnerabilities.