Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

SUSE: 2022:2307-1 Moderate: LDB And Samba Security Update

suse
Calendar Grey July 6, 2022
Scroller Suse
SUSE has released a critical security update addressing vulnerabilities in ldb and samba, along with numerous improvements for other system components.
An update that solves one vulnerability and has 10 fixes is now available

Summary

This update for ldb, samba fixes the following issues: ldb was updated to version 2.4.2 to fix: + Fix for CVE-2021-3670, ensure that the LDB request has not timed out during filter processing as the LDAP server MaxQueryDuration is otherwise not honoured. samba was updated to fix: - Revert NIS support removal; (bsc#1199247); - Use requires_eq macro to require the libldb2 version available at samba-dsdb-modules build time; (bsc#1199362); - Add missing samba-client requirement to samba-winbind package; (bsc#1198255); Update to 4.15.7 * Share and server swapped in smbget password prompt; (bso#14831); * Durable handles won't reconnect if the leased file is written to; (bso#15022); * rmdir silently fails if directory contains unreadable files and hide unreadable is yes; (bso#15023);

Topics%20covered

Topics Covered

security advisory moderate update samba SUSE Linux ldb

References

#1080338 #1118508 #1173429 #1195896 #1196224

#1196308 #1196788 #1197995 #1198255 #1199247

#1199362

Cross- CVE-2021-3670

CVSS scores:

CVE-2021-3670 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products:

SUSE Linux Enterprise Desktop 15-SP4

SUSE Linux Enterprise High Availability 15-SP4

SUSE Linux Enterprise High Performance Computing 15-SP4

SUSE Linux Enterprise Module for Basesystem 15-SP4

SUSE Linux Enterprise Server 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15-SP4

openSUSE Leap 15.4

https://www.suse.com/security/cve/CVE-2021-3670.html

https://bugzilla.suse.com/1080338

https://bugzilla.suse.com/1118508

https://bugzilla.suse.com/1173429

https://bugzilla.suse.com/1195896

https://bugzilla.suse.com/1196224

Announcement ID: SUSE-SU-2022:2307-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate update samba SUSE Linux ldb

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.