SUSE-SU-2023:4096-1: Security update for samba
This update for samba fixes the following issues: CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions. (bsc#1215904) CVE-2023-42669: Fixed a bug in "rpcecho" development server which allows Denial of Service via sleep() call on AD DC. (bso#1215905) CVE-2023-4154: Fixed a bug in dirsync which allows SYSTEM access with only "GUIDDRSGETCHANGES" right. (bsc#1215908)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/samba-client-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-libs-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/libsamba-policy0-python3-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-python3to a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-libs-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-winbind-libs-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-dsdb-modulesto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-gpupdateto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-winbindto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-libs-python3-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-client-libs-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-python3-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/sambato a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-winbind-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/libsamba-policy-develto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/libsamba-policy-python3-develto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-develto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-toolto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-debugsourceto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-dsdb-modules-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-ldb-ldapto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-ldb-ldap-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-libsto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-ceph-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-cephto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-libsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-develto a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-libsto a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-ad-dcto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/ctdb-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/ctdbto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/ctdb-pcp-pmdato a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/ctdb-pcp-pmda-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-testto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-test-debuginfoto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 32bit-4.15.13 - Upgrade
Upgrade
suse/samba-docto a version that resolves this vulnerability.Fixed in 4.15.13 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/libsamba-policy0-python3to a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-libs-python3to a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-libsto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-ad-dc-libsto a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-winbind-libsto a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-client-libsto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-4.15.13 - Upgrade
Upgrade
suse/samba-develto a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-clientto a version that resolves this vulnerability.Fixed in 64bit-4.15.13 - Upgrade
Upgrade
suse/samba-libsto a version that resolves this vulnerability.Fixed in 32bit-debug - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2023-4096=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HA-15-SP3-2023-4096=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4096=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4096=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4096=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4096=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4096=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-4096=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4096=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2023-4096=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2023-4096=1
Event History
Child vulnerabilities
Contains the following vulnerabilities.