openSUSE Leap 42.3: 2018:2396-1 important: samba input validation
opensuse
August 17, 2018
An update that solves one vulnerability and has three fixes is now available.
Description
This update for samba fixes the following issues:
The following security vulnerability was fixed:
- CVE-2018-10858: Fixed insufficient input validation on client directory
listing in libsmbclient; (bsc#1103411);
The following other change was made:
- s3: winbind: Fix 'winbind normalize names' in wb_getpwsid();
- winbind: honor "winbind use default domain" with empty domain
(bsc#1087303)
- winbind: do not modify credentials in NTLM passthru (bsc#1068059)
- net: fix net ads keytab handling (bsc#1067700)
- fix vfs_ceph flock stub
This update was imported from the SUSE:SLE-12-SP3:Update update project.
Patch
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 42.3:
zypper in -t patch openSUSE-2018-890=1
Package List
- openSUSE Leap 42.3 (i586 x86_64):
ctdb-4.6.14+git.157.c2d53c2b191-18.1
ctdb-debuginfo-4.6.14+git.157.c2d53c2b191-18.1
ctdb-tests-4.6.14+git.157.c2d53c2b191-18.1
ctdb-tests-debuginfo-4.6.14+git.157.c2d53c2b191-18.1
libdcerpc-binding0-4.6.14+git.157.c2d53c2b191-18.1
libdcerpc-binding0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1
libdcerpc-devel-4.6.14+git.157.c2d53c2b191-18.1
libdcerpc-samr-devel-4.6.14+git.157.c2d53c2b191-18.1
libdcerpc-samr0-4.6.14+git.157.c2d53c2b191-18.1
libdcerpc-samr0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1
libdcerpc0-4.6.14+git.157.c2d53c2b191-18.1
libdcerpc0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1
libndr-devel-4.6.14+git.157.c2d53c2b191-18.1
libndr-krb5pac-devel-4.6.14+git.157.c2d53c2b191-18.1
libndr-krb5pac0-4.6.14+git.157.c2d53c2b191-18.1
libndr-krb5pac0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1
libndr-nbt-devel-4.6.14+git.157.c2d53c2b191-18.1
libndr-nbt0-4.6.14+git.157.c2d53c2b191-18.1
libndr-nbt0-debuginfo-4.6.14+git.157.c2d53c2b191-18.1
libndr-standard-devel-4.6.14+git.157.c...
Read the Full AdvisoryReferences
https://www.suse.com/security/cve/CVE-2018-10858.html
https://bugzilla.suse.com/1067700
https://bugzilla.suse.com/1068059
https://bugzilla.suse.com/1087303
https://bugzilla.suse.com/1103411
--
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2018:2396-1
Rating: important
Affected Products:
openSUSE Leap 42.3
le.
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!