This update for samba fixes the following issues :

  - ZeroLogon: An elevation of privilege was possible with     some non default configurations when an attacker     established a vulnerable Netlogon secure channel     connection to a domain controller, using the Netlogon     Remote Protocol (MS-NRPC) (CVE-2020-1472, bsc#1176579).

  - Update to samba 4.11.13

  + s3: libsmb: Fix SMB2 client rename bug to a Windows     server; (bso#14403);

  + dsdb: Allow 'password hash userPassword schemes =     CryptSHA256' to work on RHEL7; (bso#14424);

  + dbcheck: Allow a dangling forward link outside our known     NCs; (bso#14450);

  + lib/debug: Set the correct default backend loglevel to     MAX_DEBUG_LEVEL; (bso#14426);

  + s3:smbd: PANIC: assert failed in get_lease_type();
    (bso#14428);

  + lib/util: do not install 'test_util_paths'; (bso#14370);

  + lib:util: Fix smbclient -l basename dir; (bso#14345);

  + s3:smbd: PANIC: assert failed in get_lease_type();
    (bso#14428);

  + util: Allow symlinks in directory_create_or_exist;
    (bso#14166);

  + docs: Fix documentation for require_membership_of of     pam_winbind; (bso#14358);

  + s3:winbind:idmap_ad: Make failure to get attrnames for     schema mode fatal; (bso#14425);

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Detections

Analytics

openSUSE Security Update : samba (openSUSE-2020-1526)

medium Nessus Plugin ID 141072

Version 1.11

Version 1.10

Version 1.9

Version 1.11 Feb 16, 2024, 7:23 PM CVSS metrics ("CVSSv3 score" set to 5.5. "CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Plugin Feed: 202402161923
Version 1.10 May 24, 2023, 12:08 AM CEA reference Plugin Feed: 202305240008
Version 1.9 Dec 6, 2022, 4:40 AM Reference Plugin Feed: 202212060440