Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

SUSE 15-SP4: Important Samba Fixes in SUSE-SU-2022:2659-1 Release

suse
Calendar Grey August 3, 2022
Scroller Suse
A recent patch addressed 5 vulnerabilities in ldb and samba, enhancing security measures for SUSE platforms. Implement the provided updates promptly.
An update that solves 5 vulnerabilities and has 6 fixes is now available

Summary

This update for ldb, samba fixes the following issues: - CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490). - CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request (bsc#1201492). - CVE-2022-2031: Fixed AD restrictions bypass associated with changing passwords (bsc#1201495). - CVE-2022-32742: Fixed a memory leak in SMB1 (bsc#1201496). - CVE-2022-32744: Fixed an arbitrary password change request for any AD user (bsc#1201493). The following non-security bug were fixed: ldb was updated to version 2.4.3: + Fix build problems, waf produces incorrect names for python extensions; (bso#15071); samba was updated to 4.15.8: * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042);

Topics%20covered

Topics Covered

security advisory important samba issue ldb fix suse 15-sp4

References

#1196224 #1198255 #1199247 #1199734 #1200556

#1200964 #1201490 #1201492 #1201493 #1201495

#1201496

Cross- CVE-2022-2031 CVE-2022-32742 CVE-2022-32744

CVE-2022-32745 CVE-2022-32746

CVSS scores:

CVE-2022-32744 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2022-32745 (SUSE): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

CVE-2022-32746 (SUSE): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Affected Products:

SUSE Linux Enterprise Desktop 15-SP4

SUSE Linux Enterprise High Availability 15-SP4

SUSE Linux Enterprise High Performance Computing 15-SP4

SUSE Linux Enterprise Module for Basesystem 15-SP4

SUSE Linux Enterprise Server 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15-SP4

SUSE Manager Proxy 4.3

...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:2659-1
Rating: important

Topics%20covered

Topics Covered

security advisory important samba issue ldb fix suse 15-sp4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.