gpp_maybe Security update for ldb, samba

SUSE-SLE-Module-Basesystem-15-SP3-2022-2586

This update for ldb, samba fixes the following issues: - CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490). - CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request (bsc#1201492). - CVE-2022-2031: Fixed AD restrictions bypass associated with changing passwords (bsc#1201495). - CVE-2022-32742: Fixed a memory leak in SMB1 (bsc#1201496). - CVE-2022-32744: Fixed an arbitrary password change request for any AD user (bsc#1201493). The following security bugs were fixed: samba was updated to 4.15.8: * Use pathref fd instead of io fd in vfs_default_durable_cookie; (bso#15042); * Setting fruit:resource = stream in vfs_fruit causes a panic; (bso#15099); * Add support for bind 9.18; (bso#14986); * logging dsdb audit to specific files does not work; (bso#15076); * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original file had been deleted; (bso#15069); * netgroups support removed; (bso#15087); (bsc#1199247); * net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * smbclient commands del & deltree fail with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556); * vfs_gpfs recalls=no option prevents listing files; (bso#15055); * waf produces incorrect names for python extensions with Python 3.11; (bso#15071); * Compile error in source3/utils/regedit_hexedit.c; (bso#15091); * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link; (bso#15108); * smbd doesn't handle UPNs for looking up names; (bso#15054); * Out-by-4 error in smbd read reply max_send clamp; (bso#14443); - Move pdb backends from package samba-libs to package samba-client-libs and remove samba-libs requirement from samba-winbind; (bsc#1200964); (bsc#1198255); - Use the canonical realm name to refresh the Kerberos tickets; (bsc#1196224); (bso#14979); - Fix smbclient commands del & deltree failing with NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100); (bsc#1200556). ldb was updated to version 2.4.3 * Fix build problems, waf produces incorrect names for python extensions; (bso#15071);

• Release Date
  Jul 29 2022
• References
  Bugzilla: 1199247, 1200964, 1198255, 1200556, 1196224, 1199734, 1201492, 1201493, 1201490, 1201496, 1201495
  CVEs: CVE-2022-2031, CVE-2022-32744, CVE-2022-32746, CVE-2022-32742, CVE-2022-32745
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.3 ppc64le

• Packages
  ldb
  An LDAP-like embedded database

  2.4.3-150300.3.20.1 lock src

  ldb-tools
  Tools to manipulate LDB files

  2.4.3-150300.3.20.1 lock rpm

  libldb-devel
  Libraries and Header Files to Develop Programs with ldb2 Support

  2.4.3-150300.3.20.1 lock rpm

  libldb2
  An LDAP-like embedded database

  2.4.3-150300.3.20.1 lock rpm

  libsamba-policy-devel
  Development files for the Samba AD Group Policy library

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  libsamba-policy-python3-devel
  Development files for the Samba AD Group Policy library

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  libsamba-policy0-python3
  Active Directory Group Policy library

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  python3-ldb
  Python3 bindings for the LDB library

  2.4.3-150300.3.20.1 lock rpm

  python3-ldb-devel
  Development files for the Python3 bindings for the LDB library

  2.4.3-150300.3.20.1 lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm lock src

  samba-ad-dc-libs
  Samba Active Directory Domain Controller libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-client
  Samba Client Utilities

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-client-libs
  Samba client libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-devel
  Development files shared by Samba subpackages

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-dsdb-modules
  Samba LDB modules

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-gpupdate
  Samba Group Policy

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-ldb-ldap
  Samba Ldb Ldap Modules

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-libs
  Samba libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-libs-python3
  Python3 dependencies of samba-libs

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-python3
  Samba Python3 libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-tool
  Main Samba administration tool

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-winbind
  Winbind Daemon and Tool

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-winbind-libs
  Winbind Daemon libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

Basesystem Module 15.3 s390x

• Packages
  ldb
  An LDAP-like embedded database

  2.4.3-150300.3.20.1 lock src

  ldb-tools
  Tools to manipulate LDB files

  2.4.3-150300.3.20.1 lock rpm

  libldb-devel
  Libraries and Header Files to Develop Programs with ldb2 Support

  2.4.3-150300.3.20.1 lock rpm

  libldb2
  An LDAP-like embedded database

  2.4.3-150300.3.20.1 lock rpm

  libsamba-policy-devel
  Development files for the Samba AD Group Policy library

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  libsamba-policy-python3-devel
  Development files for the Samba AD Group Policy library

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  libsamba-policy0-python3
  Active Directory Group Policy library

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  python3-ldb
  Python3 bindings for the LDB library

  2.4.3-150300.3.20.1 lock rpm

  python3-ldb-devel
  Development files for the Python3 bindings for the LDB library

  2.4.3-150300.3.20.1 lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm lock src

  samba-ad-dc-libs
  Samba Active Directory Domain Controller libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-client
  Samba Client Utilities

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-client-libs
  Samba client libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-devel
  Development files shared by Samba subpackages

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-dsdb-modules
  Samba LDB modules

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-gpupdate
  Samba Group Policy

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-ldb-ldap
  Samba Ldb Ldap Modules

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-libs
  Samba libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-libs-python3
  Python3 dependencies of samba-libs

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-python3
  Samba Python3 libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-tool
  Main Samba administration tool

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-winbind
  Winbind Daemon and Tool

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-winbind-libs
  Winbind Daemon libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

Basesystem Module 15.3 x86_64

• Packages
  ldb
  An LDAP-like embedded database

  2.4.3-150300.3.20.1 lock src

  ldb-tools
  Tools to manipulate LDB files

  2.4.3-150300.3.20.1 lock rpm

  libldb-devel
  Libraries and Header Files to Develop Programs with ldb2 Support

  2.4.3-150300.3.20.1 lock rpm

  libldb2
  An LDAP-like embedded database

  2.4.3-150300.3.20.1 lock rpm

  libldb2-32bit
  An LDAP-like embedded database

  2.4.3-150300.3.20.1 lock rpm

  libsamba-policy-devel
  Development files for the Samba AD Group Policy library

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  libsamba-policy-python3-devel
  Development files for the Samba AD Group Policy library

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  libsamba-policy0-python3
  Active Directory Group Policy library

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  python3-ldb
  Python3 bindings for the LDB library

  2.4.3-150300.3.20.1 lock rpm

  python3-ldb-devel
  Development files for the Python3 bindings for the LDB library

  2.4.3-150300.3.20.1 lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm lock src

  samba-ad-dc-libs
  Samba Active Directory Domain Controller libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-ad-dc-libs-32bit
  Samba Active Directory Domain Controller libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-ceph
  Ceph specific add-ons for Samba

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-client
  Samba Client Utilities

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-client-32bit
  Samba Client Utilities

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-client-libs
  Samba client libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-client-libs-32bit
  Samba client libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-devel
  Development files shared by Samba subpackages

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-devel-32bit
  Development files shared by Samba subpackages

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-dsdb-modules
  Samba LDB modules

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-gpupdate
  Samba Group Policy

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-ldb-ldap
  Samba Ldb Ldap Modules

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-libs
  Samba libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-libs-32bit
  Samba libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-libs-python3
  Python3 dependencies of samba-libs

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-python3
  Samba Python3 libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-tool
  Main Samba administration tool

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-winbind
  Winbind Daemon and Tool

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-winbind-libs
  Winbind Daemon libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-winbind-libs-32bit
  Winbind Daemon libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

Basesystem Module 15.3 aarch64

• Packages
  ldb
  An LDAP-like embedded database

  2.4.3-150300.3.20.1 lock src

  ldb-tools
  Tools to manipulate LDB files

  2.4.3-150300.3.20.1 lock rpm

  libldb-devel
  Libraries and Header Files to Develop Programs with ldb2 Support

  2.4.3-150300.3.20.1 lock rpm

  libldb2
  An LDAP-like embedded database

  2.4.3-150300.3.20.1 lock rpm

  libsamba-policy-devel
  Development files for the Samba AD Group Policy library

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  libsamba-policy-python3-devel
  Development files for the Samba AD Group Policy library

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  libsamba-policy0-python3
  Active Directory Group Policy library

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  python3-ldb
  Python3 bindings for the LDB library

  2.4.3-150300.3.20.1 lock rpm

  python3-ldb-devel
  Development files for the Python3 bindings for the LDB library

  2.4.3-150300.3.20.1 lock rpm

  samba
  A SMB/CIFS File, Print, and Authentication Server

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm lock src

  samba-ad-dc-libs
  Samba Active Directory Domain Controller libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-ceph
  Ceph specific add-ons for Samba

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-client
  Samba Client Utilities

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-client-libs
  Samba client libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-devel
  Development files shared by Samba subpackages

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-dsdb-modules
  Samba LDB modules

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-gpupdate
  Samba Group Policy

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-ldb-ldap
  Samba Ldb Ldap Modules

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-libs
  Samba libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-libs-python3
  Python3 dependencies of samba-libs

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-python3
  Samba Python3 libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-tool
  Main Samba administration tool

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-winbind
  Winbind Daemon and Tool

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm

  samba-winbind-libs
  Winbind Daemon libraries

  4.15.8+git.500.d5910280cc7-150300.3.37.1 lock rpm