Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 526
Alerts This Week
Warning Icon 1 526

openSUSE: 2015:2356-1 important: samba buffer overflow and memory issues

opensuse
Calendar Grey December 24, 2015
Scroller Opensuse
Critical openSUSE patch released for samba, ldb, talloc, tdb, and tevent to address several vulnerabilities.
An update that solves 7 vulnerabilities and has 6 fixes is An update that solves 7 vulnerabilities and has 6 fixes is An update that solves 7 vulnerabilities and has 6 fixes is now...

Description

This update for ldb, samba, talloc, tdb, tevent fixes the following issues:

ldb was updated to 1.1.24.

+ Fix ldap \00 search expression attack dos; cve-2015-3223; (bso#11325)

+ Fix remote read memory exploit in ldb; cve-2015-5330; (bso#11599)

+ Move ldb_(un)pack_data into ldb_module.h for testing

+ Fix installation of _ldb_text.py

+ Fix propagation of ldb errors through tdb

+ Fix bug triggered by having an empty message in database during search

+ Test improvements

+ Improved python bindings

+ Validate_ldb of string(generalized-time) does not accept millisecond

format ".000Z"; (bso#9810)

+ Fix logic in ldb_val_to_time()

+ Allow to register extended match rules

+ Fixes for segfaults in pyldb

+ Documentation fixes

+ Build system improvements

+ Fix a typo in the comment, ldb_flags_mod_xxx -> ldb_flag_mod_xxx

+ Fix check for third_party

+ Make the successful ldb_transaction_start() message clearer

+ Ldb-samba: fix a...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory samba openSUSE ldb tevent tdb talloc

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 13.2:

zypper in -t patch openSUSE-2015-945=1

- openSUSE 13.1:

zypper in -t patch openSUSE-2015-945=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 13.2 (i586 x86_64):

ldb-debugsource-1.1.24-3.4.1

ldb-tools-1.1.24-3.4.1

ldb-tools-debuginfo-1.1.24-3.4.1

libdcerpc-atsvc-devel-4.1.22-21.1

libdcerpc-atsvc0-4.1.22-21.1

libdcerpc-atsvc0-debuginfo-4.1.22-21.1

libdcerpc-binding0-4.1.22-21.1

libdcerpc-binding0-debuginfo-4.1.22-21.1

libdcerpc-devel-4.1.22-21.1

libdcerpc-samr-devel-4.1.22-21.1

libdcerpc-samr0-4.1.22-21.1

libdcerpc-samr0-debuginfo-4.1.22-21.1

libdcerpc0-4.1.22-21.1

libdcerpc0-debuginfo-4.1.22-21.1

libgensec-devel-4.1.22-21.1

libgensec0-4.1.22-21.1

libgensec0-debuginfo-4.1.22-21.1

libldb-devel-1.1.24-3.4.1

libldb1-1.1.24-3.4.1

libldb1-debuginfo-1.1.24-3.4.1

libndr-devel-4.1.22-21.1

libndr-krb5pac-devel-4.1.22-21.1

libndr-krb5pac0-4.1.22-21.1

libndr-krb5pac0-debuginfo-4.1.22-21.1

libndr-nbt-devel-4.1.22-21.1

libndr-nbt0-4.1.22-21.1

libndr-nbt0-debuginfo-4.1.22-21.1

libndr-standard-devel-4.1.22-21.1

libndr-standard0-4.1.22-21.1

libndr-standard0-debuginfo-4.1.22-21.1

libndr0-4.1.22-21.1

libndr0-debuginfo-4.1.22-21.1

libnetapi-devel-4.1.22-21.1

libnetap...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2015-3223.html

https://www.suse.com/security/cve/CVE-2015-5252.html

https://www.suse.com/security/cve/CVE-2015-5296.html

https://www.suse.com/security/cve/CVE-2015-5299.html

https://www.suse.com/security/cve/CVE-2015-5330.html

https://www.suse.com/security/cve/CVE-2015-7540.html

https://www.suse.com/security/cve/CVE-2015-8467.html

https://bugzilla.suse.com/show_bug.cgi?id=939050

https://bugzilla.suse.com/show_bug.cgi?id=939051

https://bugzilla.suse.com/show_bug.cgi?id=949022

https://bugzilla.suse.com/show_bug.cgi?id=951660

https://bugzilla.suse.com/show_bug.cgi?id=953382

https://bugzilla.suse.com/show_bug.cgi?id=954658

https://bugzilla.suse.com/show_bug.cgi?id=958580

https://bugzilla.suse.com/show_bug.cgi?id=958581

https://bugzilla.suse.com/show_bug.cgi?id=958582

https://bugzilla.suse.com/show_bug.cgi?id=958583

https://bugzilla.suse.com/show_bug.cgi?id=958584

https://bugzilla.suse.com/show_bug.cgi?id=958585

https://bugzilla.suse.com/show_bug.cgi?id=958586

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2015:2356-1
Rating: important
Affected Products: openSUSE 13.2 openSUSE 13.1

Topics%20covered

Topics Covered

security advisory samba openSUSE ldb tevent tdb talloc

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.