SUSE: 2020:0223-1 Moderate Security Update for Samba Server Crash
suse
January 23, 2020
An update that solves three vulnerabilities and has one errata is now available
Summary
This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888). - CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not working (bsc#1160850). - CVE-2019-19344: Fixed a server crash when using dns zone scavenging yes (bsc#1160852). Non-security issue fixed: - Fixed Ceph snapshot path handling relative to root (bsc#1141320). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Python2 15-SP1:
Topics Covered
References
#1141320 #1160850 #1160852 #1160888
Cross- CVE-2019-14902 CVE-2019-14907 CVE-2019-19344
Affected Products:
SUSE Linux Enterprise Module for Python2 15-SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
SUSE Linux Enterprise Module for Basesystem 15-SP1
SUSE Linux Enterprise High Availability 15-SP1
SUSE Enterprise Storage 6
https://www.suse.com/security/cve/CVE-2019-14902.html
https://www.suse.com/security/cve/CVE-2019-14907.html
https://www.suse.com/security/cve/CVE-2019-19344.html
https://bugzilla.suse.com/1141320
https://bugzilla.suse.com/1160850
https://bugzilla.suse.com/1160852
https://bugzilla.suse.com/1160888
PREVIOUS 
NEXT Announcement ID: SUSE-SU-2020:0223-1
Rating: moderate
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!