gpp_maybe
Security update for samba
SUSE-SLE-HA-12-SP5-2023-81
This update for samba fixes the following issues: - Updated to version 4.15.13: - CVE-2022-38023: Removed weak cryptographic algorithms from the Netlogon RPC implementation (bsc#1206504). - CVE-2022-42898: Fixed several buffer overflow vulnerabilities on 32-bit systems (bsc#1205126). - CVE-2022-3437: Fixed a buffer overflow in Heimdal unwrap_des3() (bsc#1204254). - CVE-2022-32742: Fixed an information disclosure issue affecting SMB1 servers (bsc#1201496). - CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490). - CVE-2022-2031: Fixed an AD restriction bypass associated with changing passwords (bsc#1201495). - CVE-2022-32745: Fixed a remote server crash that could be triggered with certain LDAP requests (bsc#1201492). - CVE-2022-32744: Fixed an issue where AD users could have forged password change requests on behalf of other users (bsc#1201493). Other fixes: - Fixed a potential crash due to a concurrency issue (bsc#1200102).
-
Release DateJan 12 2023
-
ReferencesBugzilla: 1201492, 1201490, 1200102, 1201495, 1201496, 1206504, 1205126, 1201493, 1204254
CVEs: CVE-2022-32745, CVE-2022-3437, CVE-2022-42898, CVE-2022-32744, CVE-2022-32746, CVE-2022-32742, CVE-2022-2031, CVE-2022-38023 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise High Availability Extension 12.5 ppc64le
-
Packages
SUSE Linux Enterprise Server for SAP Applications 12.5 x86_64
-
Packages
SUSE Linux Enterprise High Availability Extension 12.5 s390x
-
Packages