Security update for samba
This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888). - CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not working (bsc#1160850). - CVE-2019-19344: Fixed a server crash when using dns zone scavenging = yes (bsc#1160852). Non-security issue fixed: - Fixed Ceph snapshot path handling relative to root (bsc#1141320). This update was imported from the SUSE:SLE-15-SP1:Update update project.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888). - CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not working (bsc#1160850). - CVE-2019-19344: Fixed a server crash when using dns zone scavenging = yes (bsc#1160852). Non-security issue fixed: - Fixed Ceph snapshot path handling relative to root (bsc#1141320). This update was imported from the SUSE:SLE-15-SP1:Update update project.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1141320
- https://bugzilla.suse.com/1160850
- https://bugzilla.suse.com/1160852
- https://bugzilla.suse.com/1160888
- https://lists.opensuse.org/archives/list/[email protected]/thread/OSS2CK6VSLL6IEQRPPMP2VPFDOZ7PYGK/
- https://www.suse.com/security/cve/CVE-2019-14902
- https://www.suse.com/security/cve/CVE-2019-14907
- https://www.suse.com/security/cve/CVE-2019-19344