Security update for samba SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:3673-1 Final 1 1 2021-11-16T14:14:53Z current 2021-11-16T14:14:53Z 2021-11-16T14:14:53Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for samba This update for samba fixes the following issues: - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440). - CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2021-3673,SUSE-SLE-SERVER-12-SP2-BCL-2021-3673 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20213673-1/ Link for SUSE-SU-2021:3673-1 https://lists.suse.com/pipermail/sle-security-updates/2021-November/009731.html E-Mail link for SUSE-SU-2021:3673-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1014440 SUSE Bug 1014440 https://bugzilla.suse.com/1192284 SUSE Bug 1192284 https://www.suse.com/security/cve/CVE-2016-2124/ SUSE CVE CVE-2016-2124 page https://www.suse.com/security/cve/CVE-2020-25717/ SUSE CVE CVE-2020-25717 page SUSE Linux Enterprise Server 12 SP2-BCL ctdb-4.4.2-38.45.2 ctdb-tests-4.4.2-38.45.2 libdcerpc-binding0-4.4.2-38.45.2 libdcerpc-binding0-32bit-4.4.2-38.45.2 libdcerpc-binding0-64bit-4.4.2-38.45.2 libdcerpc-devel-4.4.2-38.45.2 libdcerpc-samr-devel-4.4.2-38.45.2 libdcerpc-samr0-4.4.2-38.45.2 libdcerpc-samr0-32bit-4.4.2-38.45.2 libdcerpc-samr0-64bit-4.4.2-38.45.2 libdcerpc0-4.4.2-38.45.2 libdcerpc0-32bit-4.4.2-38.45.2 libdcerpc0-64bit-4.4.2-38.45.2 libndr-devel-4.4.2-38.45.2 libndr-krb5pac-devel-4.4.2-38.45.2 libndr-krb5pac0-4.4.2-38.45.2 libndr-krb5pac0-32bit-4.4.2-38.45.2 libndr-krb5pac0-64bit-4.4.2-38.45.2 libndr-nbt-devel-4.4.2-38.45.2 libndr-nbt0-4.4.2-38.45.2 libndr-nbt0-32bit-4.4.2-38.45.2 libndr-nbt0-64bit-4.4.2-38.45.2 libndr-standard-devel-4.4.2-38.45.2 libndr-standard0-4.4.2-38.45.2 libndr-standard0-32bit-4.4.2-38.45.2 libndr-standard0-64bit-4.4.2-38.45.2 libndr0-4.4.2-38.45.2 libndr0-32bit-4.4.2-38.45.2 libndr0-64bit-4.4.2-38.45.2 libnetapi-devel-4.4.2-38.45.2 libnetapi0-4.4.2-38.45.2 libnetapi0-32bit-4.4.2-38.45.2 libnetapi0-64bit-4.4.2-38.45.2 libsamba-credentials-devel-4.4.2-38.45.2 libsamba-credentials0-4.4.2-38.45.2 libsamba-credentials0-32bit-4.4.2-38.45.2 libsamba-credentials0-64bit-4.4.2-38.45.2 libsamba-errors-devel-4.4.2-38.45.2 libsamba-errors0-4.4.2-38.45.2 libsamba-errors0-32bit-4.4.2-38.45.2 libsamba-errors0-64bit-4.4.2-38.45.2 libsamba-hostconfig-devel-4.4.2-38.45.2 libsamba-hostconfig0-4.4.2-38.45.2 libsamba-hostconfig0-32bit-4.4.2-38.45.2 libsamba-hostconfig0-64bit-4.4.2-38.45.2 libsamba-passdb-devel-4.4.2-38.45.2 libsamba-passdb0-4.4.2-38.45.2 libsamba-passdb0-32bit-4.4.2-38.45.2 libsamba-passdb0-64bit-4.4.2-38.45.2 libsamba-policy-devel-4.4.2-38.45.2 libsamba-policy0-4.4.2-38.45.2 libsamba-policy0-32bit-4.4.2-38.45.2 libsamba-policy0-64bit-4.4.2-38.45.2 libsamba-util-devel-4.4.2-38.45.2 libsamba-util0-4.4.2-38.45.2 libsamba-util0-32bit-4.4.2-38.45.2 libsamba-util0-64bit-4.4.2-38.45.2 libsamdb-devel-4.4.2-38.45.2 libsamdb0-4.4.2-38.45.2 libsamdb0-32bit-4.4.2-38.45.2 libsamdb0-64bit-4.4.2-38.45.2 libsmbclient-devel-4.4.2-38.45.2 libsmbclient0-4.4.2-38.45.2 libsmbclient0-32bit-4.4.2-38.45.2 libsmbclient0-64bit-4.4.2-38.45.2 libsmbconf-devel-4.4.2-38.45.2 libsmbconf0-4.4.2-38.45.2 libsmbconf0-32bit-4.4.2-38.45.2 libsmbconf0-64bit-4.4.2-38.45.2 libsmbldap-devel-4.4.2-38.45.2 libsmbldap0-4.4.2-38.45.2 libsmbldap0-32bit-4.4.2-38.45.2 libsmbldap0-64bit-4.4.2-38.45.2 libtevent-util-devel-4.4.2-38.45.2 libtevent-util0-4.4.2-38.45.2 libtevent-util0-32bit-4.4.2-38.45.2 libtevent-util0-64bit-4.4.2-38.45.2 libwbclient-devel-4.4.2-38.45.2 libwbclient0-4.4.2-38.45.2 libwbclient0-32bit-4.4.2-38.45.2 libwbclient0-64bit-4.4.2-38.45.2 samba-4.4.2-38.45.2 samba-client-4.4.2-38.45.2 samba-client-32bit-4.4.2-38.45.2 samba-client-64bit-4.4.2-38.45.2 samba-core-devel-4.4.2-38.45.2 samba-doc-4.4.2-38.45.2 samba-libs-4.4.2-38.45.2 samba-libs-32bit-4.4.2-38.45.2 samba-libs-64bit-4.4.2-38.45.2 samba-pidl-4.4.2-38.45.2 samba-python-4.4.2-38.45.2 samba-test-4.4.2-38.45.2 samba-winbind-4.4.2-38.45.2 samba-winbind-32bit-4.4.2-38.45.2 samba-winbind-64bit-4.4.2-38.45.2 libdcerpc-binding0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libdcerpc-binding0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libdcerpc0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libdcerpc0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr-krb5pac0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr-krb5pac0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr-nbt0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr-nbt0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr-standard0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr-standard0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libndr0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libnetapi0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libnetapi0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-credentials0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-credentials0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-errors0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-errors0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-hostconfig0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-hostconfig0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-passdb0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-passdb0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-util0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamba-util0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamdb0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsamdb0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsmbclient0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsmbclient0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsmbconf0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsmbconf0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsmbldap0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsmbldap0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtevent-util0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libtevent-util0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libwbclient0-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libwbclient0-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-client-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-client-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-doc-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-libs-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-libs-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-winbind-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL samba-winbind-32bit-4.4.2-38.45.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required. CVE-2016-2124 SUSE Linux Enterprise Server 12 SP2-BCL:libdcerpc-binding0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libdcerpc-binding0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libdcerpc0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libdcerpc0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-krb5pac0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-krb5pac0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-nbt0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-nbt0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-standard0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-standard0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libnetapi0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libnetapi0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-credentials0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-credentials0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-errors0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-errors0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-hostconfig0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-hostconfig0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-passdb0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-passdb0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-util0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-util0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamdb0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamdb0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbclient0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbclient0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbconf0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbconf0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbldap0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbldap0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libtevent-util0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libtevent-util0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libwbclient0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libwbclient0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-client-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-client-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-doc-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-libs-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-libs-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-winbind-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-winbind-4.4.2-38.45.2 moderate 2.9 AV:A/AC:M/Au:N/C:P/I:N/A:N 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213673-1/ https://www.suse.com/security/cve/CVE-2016-2124.html CVE-2016-2124 https://bugzilla.suse.com/1014440 SUSE Bug 1014440 A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation. CVE-2020-25717 SUSE Linux Enterprise Server 12 SP2-BCL:libdcerpc-binding0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libdcerpc-binding0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libdcerpc0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libdcerpc0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-krb5pac0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-krb5pac0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-nbt0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-nbt0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-standard0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr-standard0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libndr0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libnetapi0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libnetapi0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-credentials0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-credentials0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-errors0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-errors0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-hostconfig0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-hostconfig0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-passdb0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-passdb0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-util0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamba-util0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamdb0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsamdb0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbclient0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbclient0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbconf0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbconf0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbldap0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsmbldap0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libtevent-util0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libtevent-util0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libwbclient0-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:libwbclient0-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-client-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-client-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-doc-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-libs-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-libs-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-winbind-32bit-4.4.2-38.45.2 SUSE Linux Enterprise Server 12 SP2-BCL:samba-winbind-4.4.2-38.45.2 important 8.5 AV:N/AC:L/Au:S/C:C/I:C/A:N 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213673-1/ https://www.suse.com/security/cve/CVE-2020-25717.html CVE-2020-25717 https://bugzilla.suse.com/1192284 SUSE Bug 1192284 https://bugzilla.suse.com/1192505 SUSE Bug 1192505 https://bugzilla.suse.com/1192601 SUSE Bug 1192601 https://bugzilla.suse.com/1192849 SUSE Bug 1192849 https://bugzilla.suse.com/1193011 SUSE Bug 1193011 https://bugzilla.suse.com/1194049 SUSE Bug 1194049 https://bugzilla.suse.com/1194307 SUSE Bug 1194307 https://bugzilla.suse.com/1195815 SUSE Bug 1195815 https://bugzilla.suse.com/1196344 SUSE Bug 1196344 https://bugzilla.suse.com/1196717 SUSE Bug 1196717 https://bugzilla.suse.com/1196920 SUSE Bug 1196920 https://bugzilla.suse.com/1205061 SUSE Bug 1205061