FERRAMENTAS LINUX: Atualização de segurança do SUSE para o Samba, aviso SUSE: 2020: 0223-1

Confra !!

Uma atualização que resolve três vulnerabilidades e tem uma errata agora está disponível.

Atualização de segurança do SUSE: atualização de segurança para o samba
______________________________________________________________________________

ID do anúncio: SUSE-SU-2020: 0223-1
Classificação: moderado
Referências: # 1141320 # 1160850 # 1160852 # 1160888
Referências cruzadas: CVE-2019-14902 CVE-2019-14907 CVE-2019-19344

Produtos afetados:
Módulo Corporativo SUSE Linux para Python2 15-SP1
SUSE Linux Enterprise Module para Ferramentas de desenvolvimento abertas do Buildservice 15-SP1
Módulo Corporativo SUSE Linux para Basesystem 15-SP1
Alta disponibilidade do SUSE Linux Enterprise 15-SP1
SUSE Enterprise Storage 6
______________________________________________________________________________

Uma atualização que resolve três vulnerabilidades e possui uma
errata já está disponível.

Descrição:

Esta atualização para o samba corrige os seguintes problemas:

Problemas de segurança corrigidos:

- CVE-2019-14907: corrigida uma falha no servidor após a conversão do charset
falha durante o processamento NTLMSSP (bsc # 1160888).
- CVE-2019-14902: corrigido um problema em que a replicação automática de ACLs era desativada
subárvore no AD Directory não está funcionando (bsc # 1160850).
- CVE-2019-19344: corrigida uma falha no servidor ao usar a limpeza de zona DNS =
sim (bsc # 1160852).

Problema não relacionado à segurança corrigido:

- Corrigido o caminho do snapshot do Ceph manipulado em relação à raiz (bsc # 1141320).

Instruções de patch:

Para instalar esta atualização de segurança do SUSE, use os métodos de instalação recomendados pelo SUSE
como o YaST online_update ou "zypper patch".

Como alternativa, você pode executar o comando listado para o seu produto:

- SUSE Linux Enterprise Module para Python2 15-SP1:

zypper no patch -t SUSE-SLE-Module-Python2-15-SP1-2020-223 = 1

- SUSE Linux Enterprise Module para ferramentas de desenvolvimento Open Buildservice 15-SP1:

zypper no patch -t SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-223 = 1

- SUSE Linux Enterprise Module para Basesystem 15-SP1:

zypper no patch -t SUSE-SLE-Module-Basesystem-15-SP1-2020-223 = 1

- Alta disponibilidade do SUSE Linux Enterprise 15-SP1:

zypper no patch -t SUSE-SLE-Product-HA-15-SP1-2020-223 = 1

- SUSE Enterprise Storage 6:

zypper no patch -t SUSE-Storage-6-2020-223 = 1

Lista de Pacotes:

- SUSE Linux Enterprise Module para Python2 15-SP1 (aarch64 ppc64le s390x x86_64):

libsamba-policy0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-policy0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-ad-dc-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-ad-dc-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-debugsource-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-dsdb-modules-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-dsdb-modules-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-libs-python-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-libs-python-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-python-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-python-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1

- SUSE Linux Enterprise Module para Ferramentas de desenvolvimento abertas do Buildservice 15-SP1 (aarch64 ppc64le s390x x86_64):

ctdb-pcp-pmda-4.9.5 + git.243.e76c5cb3d97-3.21.1
ctdb-pcp-pmda-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
ctdb-tests-4.9.5 + git.243.e76c5cb3d97-3.21.1
ctdb-tests-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-policy-python-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-debugsource-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-test-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-test-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1

- SUSE Linux Enterprise Module para Ferramentas de desenvolvimento abertas do Buildservice 15-SP1 (aarch64 x86_64):

samba-ceph-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-ceph-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1

- SUSE Linux Enterprise Module para Ferramentas de desenvolvimento abertas do Buildservice 15-SP1 (x86_64):

libdcerpc-samr0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libdcerpc-samr0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-policy0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-policy0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-policy0-python3-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-policy0-python3-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbclient0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbclient0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-ad-dc-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-ad-dc-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-client-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-client-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-libs-python-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-libs-python-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-libs-python3-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-libs-python3-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1

- SUSE Linux Enterprise Module para ferramentas de desenvolvimento Open Buildservice 15-SP1 (noarch):

samba-doc-4.9.5 + git.243.e76c5cb3d97-3.21.1

- SUSE Linux Enterprise Module para Basesystem 15-SP1 (aarch64 ppc64le s390x x86_64):

libdcerpc-binding0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libdcerpc-binding0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libdcerpc-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libdcerpc-samr-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libdcerpc-samr0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libdcerpc-samr0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libdcerpc0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libdcerpc0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-krb5pac-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-krb5pac0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-krb5pac0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-nbt-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-nbt0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-nbt0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-standard-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-standard0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-standard0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libnetapi-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libnetapi0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libnetapi0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-credentials-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-credentials0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-credentials0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-errors-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-errors0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-errors0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-hostconfig-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-hostconfig0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-hostconfig0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-passdb-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-passdb0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-passdb0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-policy-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-policy-python3-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-policy0-python3-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-policy0-python3-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-util-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-util0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-util0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamdb-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamdb0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamdb0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbclient-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbclient0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbclient0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbconf-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbconf0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbconf0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbldap-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbldap2-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbldap2-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libtevent-util-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libtevent-util0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libtevent-util0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libwbclient-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
libwbclient0-4.9.5 + git.243.e76c5cb3d97-3.21.1
libwbclient0-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-client-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-client-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-core-devel-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-debugsource-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-libs-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-libs-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-libs-python3-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-libs-python3-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-python3-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-python3-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-winbind-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-winbind-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1

- SUSE Linux Enterprise Module para Basesystem 15-SP1 (x86_64):

libdcerpc-binding0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libdcerpc-binding0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libdcerpc0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libdcerpc0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-krb5pac0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-krb5pac0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-nbt0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-nbt0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-standard0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr-standard0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libndr0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libnetapi0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libnetapi0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-credentials0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-credentials0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-errors0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-errors0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-hostconfig0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-hostconfig0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-passdb0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-passdb0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-util0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamba-util0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamdb0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsamdb0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbconf0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbconf0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbldap2-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libsmbldap2-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libtevent-util0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libtevent-util0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
libwbclient0-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
libwbclient0-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-libs-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-libs-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-winbind-32bit-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-winbind-32bit-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1

- Alta disponibilidade do SUSE Linux Enterprise 15-SP1 (aarch64 ppc64le s390x x86_64):

ctdb-4.9.5 + git.243.e76c5cb3d97-3.21.1
ctdb-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-debugsource-4.9.5 + git.243.e76c5cb3d97-3.21.1

- SUSE Enterprise Storage 6 (aarch64 x86_64):

samba-ceph-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-ceph-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-debuginfo-4.9.5 + git.243.e76c5cb3d97-3.21.1
samba-debugsource-4.9.5 + git.243.e76c5cb3d97-3.21.1

Referências:

https://www.suse.com/security/cve/CVE-2019-14902.html
https://www.suse.com/security/cve/CVE-2019-14907.html
https://www.suse.com/security/cve/CVE-2019-19344.html
https://bugzilla.suse.com/1141320
https://bugzilla.suse.com/1160850
https://bugzilla.suse.com/1160852
https://bugzilla.suse.com/1160888

_______________________________________________
lista de discussão sle-security-updates
sle-security-updates@lists.suse.com
http://lists.suse.com/mailman/listinfo/sle-security-updates

Fonte

Até a próxima !