Security update for samba SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2016:1025-1 Final 1 1 2016-04-13T08:59:48Z current 2016-04-13T08:59:48Z 2016-04-13T08:59:48Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for samba samba was updated to fix seven security issues. These security issues were fixed: - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks (bsc#936862). - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication (bsc#973031). - CVE-2016-2111: Domain controller netlogon member computer could have been spoofed (bsc#973032). - CVE-2016-2112: LDAP conenctions were vulnerable to downgrade and MITM attack (bsc#973033). - CVE-2016-2113: TLS certificate validation were missing (bsc#973034). - CVE-2016-2115: Named pipe IPC were vulnerable to MITM attacks (bsc#973036). - CVE-2016-2118: 'Badlock' DCERPC impersonation of authenticated account were possible (bsc#971965). These non-security issues were fixed: - bsc#974629: Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call. - bsc#973832: Obsolete libsmbsharemodes0 from samba-libs and libsmbsharemodes-devel from samba-core-devel. - bsc#972197: Obsolete libsmbclient from libsmbclient0 and libpdb-devel from libsamba-passdb-devel while not providing it. - Getting and setting Windows ACLs on symlinks can change permissions on link - bsc#924519: Upgrade on-disk FSRVP server state to new version. - bsc#968973: Only obsolete but do not provide gplv2/3 package names. - bso#6482: s3:utils/smbget: Fix recursive download. - bso#10489: s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support. - bso#11643: docs: Add example for domain logins to smbspool man page. - bso#11690: s3-client: Add a KRB5 wrapper for smbspool. - bso#11708: loadparm: Fix memory leak issue. - bso#11714: lib/tsocket: Work around sockets not supporting FIONREAD. - bso#11719: ctdb-scripts: Drop use of 'smbcontrol winbindd ip-dropped ...'. - bso#11727: s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file. - bso#11732: param: Fix str_list_v3 to accept ';' again. - bso#11740: Real memeory leak(buildup) issue in loadparm. This update was imported from the SUSE:SLE-12-SP1:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html E-Mail link for openSUSE-SU-2016:1025-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.1 ctdb-4.2.4-15.1 ctdb-devel-4.2.4-15.1 ctdb-tests-4.2.4-15.1 libdcerpc-atsvc-devel-4.2.4-15.1 libdcerpc-atsvc0-4.2.4-15.1 libdcerpc-atsvc0-32bit-4.2.4-15.1 libdcerpc-binding0-4.2.4-15.1 libdcerpc-binding0-32bit-4.2.4-15.1 libdcerpc-devel-4.2.4-15.1 libdcerpc-samr-devel-4.2.4-15.1 libdcerpc-samr0-4.2.4-15.1 libdcerpc-samr0-32bit-4.2.4-15.1 libdcerpc0-4.2.4-15.1 libdcerpc0-32bit-4.2.4-15.1 libgensec-devel-4.2.4-15.1 libgensec0-4.2.4-15.1 libgensec0-32bit-4.2.4-15.1 libndr-devel-4.2.4-15.1 libndr-krb5pac-devel-4.2.4-15.1 libndr-krb5pac0-4.2.4-15.1 libndr-krb5pac0-32bit-4.2.4-15.1 libndr-nbt-devel-4.2.4-15.1 libndr-nbt0-4.2.4-15.1 libndr-nbt0-32bit-4.2.4-15.1 libndr-standard-devel-4.2.4-15.1 libndr-standard0-4.2.4-15.1 libndr-standard0-32bit-4.2.4-15.1 libndr0-4.2.4-15.1 libndr0-32bit-4.2.4-15.1 libnetapi-devel-4.2.4-15.1 libnetapi0-4.2.4-15.1 libnetapi0-32bit-4.2.4-15.1 libregistry-devel-4.2.4-15.1 libregistry0-4.2.4-15.1 libregistry0-32bit-4.2.4-15.1 libsamba-credentials-devel-4.2.4-15.1 libsamba-credentials0-4.2.4-15.1 libsamba-credentials0-32bit-4.2.4-15.1 libsamba-hostconfig-devel-4.2.4-15.1 libsamba-hostconfig0-4.2.4-15.1 libsamba-hostconfig0-32bit-4.2.4-15.1 libsamba-passdb-devel-4.2.4-15.1 libsamba-passdb0-4.2.4-15.1 libsamba-passdb0-32bit-4.2.4-15.1 libsamba-policy-devel-4.2.4-15.1 libsamba-policy0-4.2.4-15.1 libsamba-policy0-32bit-4.2.4-15.1 libsamba-util-devel-4.2.4-15.1 libsamba-util0-4.2.4-15.1 libsamba-util0-32bit-4.2.4-15.1 libsamdb-devel-4.2.4-15.1 libsamdb0-4.2.4-15.1 libsamdb0-32bit-4.2.4-15.1 libsmbclient-devel-4.2.4-15.1 libsmbclient-raw-devel-4.2.4-15.1 libsmbclient-raw0-4.2.4-15.1 libsmbclient-raw0-32bit-4.2.4-15.1 libsmbclient0-4.2.4-15.1 libsmbclient0-32bit-4.2.4-15.1 libsmbconf-devel-4.2.4-15.1 libsmbconf0-4.2.4-15.1 libsmbconf0-32bit-4.2.4-15.1 libsmbldap-devel-4.2.4-15.1 libsmbldap0-4.2.4-15.1 libsmbldap0-32bit-4.2.4-15.1 libtevent-util-devel-4.2.4-15.1 libtevent-util0-4.2.4-15.1 libtevent-util0-32bit-4.2.4-15.1 libwbclient-devel-4.2.4-15.1 libwbclient0-4.2.4-15.1 libwbclient0-32bit-4.2.4-15.1 samba-4.2.4-15.1 samba-32bit-4.2.4-15.1 samba-client-4.2.4-15.1 samba-client-32bit-4.2.4-15.1 samba-core-devel-4.2.4-15.1 samba-doc-4.2.4-15.1 samba-libs-4.2.4-15.1 samba-libs-32bit-4.2.4-15.1 samba-pidl-4.2.4-15.1 samba-python-4.2.4-15.1 samba-test-4.2.4-15.1 samba-test-devel-4.2.4-15.1 samba-winbind-4.2.4-15.1 samba-winbind-32bit-4.2.4-15.1 ctdb-4.2.4-15.1 as a component of openSUSE Leap 42.1 ctdb-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 ctdb-tests-4.2.4-15.1 as a component of openSUSE Leap 42.1 libdcerpc-atsvc-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libdcerpc-atsvc0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libdcerpc-atsvc0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libdcerpc-binding0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libdcerpc-binding0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libdcerpc-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libdcerpc-samr-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libdcerpc-samr0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libdcerpc-samr0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libdcerpc0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libdcerpc0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libgensec-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libgensec0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libgensec0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libndr-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libndr-krb5pac-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libndr-krb5pac0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libndr-krb5pac0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libndr-nbt-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libndr-nbt0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libndr-nbt0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libndr-standard-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libndr-standard0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libndr-standard0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libndr0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libndr0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libnetapi-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libnetapi0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libnetapi0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libregistry-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libregistry0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libregistry0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-credentials-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-credentials0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-credentials0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-hostconfig-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-hostconfig0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-hostconfig0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-passdb-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-passdb0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-passdb0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-policy-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-policy0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-policy0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-util-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-util0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamba-util0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamdb-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamdb0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsamdb0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsmbclient-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsmbclient-raw-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsmbclient-raw0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsmbclient-raw0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsmbclient0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsmbclient0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsmbconf-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsmbconf0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsmbconf0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsmbldap-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsmbldap0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libsmbldap0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libtevent-util-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libtevent-util0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libtevent-util0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 libwbclient-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 libwbclient0-4.2.4-15.1 as a component of openSUSE Leap 42.1 libwbclient0-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-client-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-client-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-core-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-doc-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-libs-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-libs-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-pidl-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-python-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-test-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-test-devel-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-winbind-4.2.4-15.1 as a component of openSUSE Leap 42.1 samba-winbind-32bit-4.2.4-15.1 as a component of openSUSE Leap 42.1 Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors. CVE-2015-5370 openSUSE Leap 42.1:ctdb-4.2.4-15.1 openSUSE Leap 42.1:ctdb-devel-4.2.4-15.1 openSUSE Leap 42.1:ctdb-tests-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-4.2.4-15.1 openSUSE Leap 42.1:libgensec-devel-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-4.2.4-15.1 openSUSE Leap 42.1:libndr-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-4.2.4-15.1 openSUSE Leap 42.1:libndr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr0-4.2.4-15.1 openSUSE Leap 42.1:libnetapi-devel-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-4.2.4-15.1 openSUSE Leap 42.1:libregistry-devel-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-4.2.4-15.1 openSUSE Leap 42.1:libsamdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-4.2.4-15.1 openSUSE Leap 42.1:libwbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-4.2.4-15.1 openSUSE Leap 42.1:samba-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-4.2.4-15.1 openSUSE Leap 42.1:samba-client-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-client-4.2.4-15.1 openSUSE Leap 42.1:samba-core-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-doc-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-4.2.4-15.1 openSUSE Leap 42.1:samba-pidl-4.2.4-15.1 openSUSE Leap 42.1:samba-python-4.2.4-15.1 openSUSE Leap 42.1:samba-test-4.2.4-15.1 openSUSE Leap 42.1:samba-test-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-4.2.4-15.1 important 8.5 AV:N/AC:M/Au:S/C:C/I:C/A:C Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html https://www.suse.com/security/cve/CVE-2015-5370.html CVE-2015-5370 https://bugzilla.suse.com/936862 SUSE Bug 936862 https://bugzilla.suse.com/975276 SUSE Bug 975276 The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security. CVE-2016-2110 openSUSE Leap 42.1:ctdb-4.2.4-15.1 openSUSE Leap 42.1:ctdb-devel-4.2.4-15.1 openSUSE Leap 42.1:ctdb-tests-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-4.2.4-15.1 openSUSE Leap 42.1:libgensec-devel-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-4.2.4-15.1 openSUSE Leap 42.1:libndr-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-4.2.4-15.1 openSUSE Leap 42.1:libndr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr0-4.2.4-15.1 openSUSE Leap 42.1:libnetapi-devel-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-4.2.4-15.1 openSUSE Leap 42.1:libregistry-devel-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-4.2.4-15.1 openSUSE Leap 42.1:libsamdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-4.2.4-15.1 openSUSE Leap 42.1:libwbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-4.2.4-15.1 openSUSE Leap 42.1:samba-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-4.2.4-15.1 openSUSE Leap 42.1:samba-client-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-client-4.2.4-15.1 openSUSE Leap 42.1:samba-core-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-doc-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-4.2.4-15.1 openSUSE Leap 42.1:samba-pidl-4.2.4-15.1 openSUSE Leap 42.1:samba-python-4.2.4-15.1 openSUSE Leap 42.1:samba-test-4.2.4-15.1 openSUSE Leap 42.1:samba-test-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-4.2.4-15.1 moderate 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html https://www.suse.com/security/cve/CVE-2016-2110.html CVE-2016-2110 https://bugzilla.suse.com/1009711 SUSE Bug 1009711 https://bugzilla.suse.com/973031 SUSE Bug 973031 https://bugzilla.suse.com/973033 SUSE Bug 973033 https://bugzilla.suse.com/973036 SUSE Bug 973036 https://bugzilla.suse.com/975276 SUSE Bug 975276 The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005. CVE-2016-2111 openSUSE Leap 42.1:ctdb-4.2.4-15.1 openSUSE Leap 42.1:ctdb-devel-4.2.4-15.1 openSUSE Leap 42.1:ctdb-tests-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-4.2.4-15.1 openSUSE Leap 42.1:libgensec-devel-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-4.2.4-15.1 openSUSE Leap 42.1:libndr-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-4.2.4-15.1 openSUSE Leap 42.1:libndr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr0-4.2.4-15.1 openSUSE Leap 42.1:libnetapi-devel-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-4.2.4-15.1 openSUSE Leap 42.1:libregistry-devel-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-4.2.4-15.1 openSUSE Leap 42.1:libsamdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-4.2.4-15.1 openSUSE Leap 42.1:libwbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-4.2.4-15.1 openSUSE Leap 42.1:samba-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-4.2.4-15.1 openSUSE Leap 42.1:samba-client-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-client-4.2.4-15.1 openSUSE Leap 42.1:samba-core-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-doc-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-4.2.4-15.1 openSUSE Leap 42.1:samba-pidl-4.2.4-15.1 openSUSE Leap 42.1:samba-python-4.2.4-15.1 openSUSE Leap 42.1:samba-test-4.2.4-15.1 openSUSE Leap 42.1:samba-test-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-4.2.4-15.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html https://www.suse.com/security/cve/CVE-2016-2111.html CVE-2016-2111 https://bugzilla.suse.com/973032 SUSE Bug 973032 https://bugzilla.suse.com/975276 SUSE Bug 975276 The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream. CVE-2016-2112 openSUSE Leap 42.1:ctdb-4.2.4-15.1 openSUSE Leap 42.1:ctdb-devel-4.2.4-15.1 openSUSE Leap 42.1:ctdb-tests-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-4.2.4-15.1 openSUSE Leap 42.1:libgensec-devel-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-4.2.4-15.1 openSUSE Leap 42.1:libndr-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-4.2.4-15.1 openSUSE Leap 42.1:libndr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr0-4.2.4-15.1 openSUSE Leap 42.1:libnetapi-devel-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-4.2.4-15.1 openSUSE Leap 42.1:libregistry-devel-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-4.2.4-15.1 openSUSE Leap 42.1:libsamdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-4.2.4-15.1 openSUSE Leap 42.1:libwbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-4.2.4-15.1 openSUSE Leap 42.1:samba-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-4.2.4-15.1 openSUSE Leap 42.1:samba-client-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-client-4.2.4-15.1 openSUSE Leap 42.1:samba-core-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-doc-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-4.2.4-15.1 openSUSE Leap 42.1:samba-pidl-4.2.4-15.1 openSUSE Leap 42.1:samba-python-4.2.4-15.1 openSUSE Leap 42.1:samba-test-4.2.4-15.1 openSUSE Leap 42.1:samba-test-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-4.2.4-15.1 moderate 4.3 AV:A/AC:M/Au:N/C:P/I:P/A:N Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html https://www.suse.com/security/cve/CVE-2016-2112.html CVE-2016-2112 https://bugzilla.suse.com/973031 SUSE Bug 973031 https://bugzilla.suse.com/973033 SUSE Bug 973033 https://bugzilla.suse.com/975276 SUSE Bug 975276 Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate. CVE-2016-2113 openSUSE Leap 42.1:ctdb-4.2.4-15.1 openSUSE Leap 42.1:ctdb-devel-4.2.4-15.1 openSUSE Leap 42.1:ctdb-tests-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-4.2.4-15.1 openSUSE Leap 42.1:libgensec-devel-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-4.2.4-15.1 openSUSE Leap 42.1:libndr-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-4.2.4-15.1 openSUSE Leap 42.1:libndr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr0-4.2.4-15.1 openSUSE Leap 42.1:libnetapi-devel-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-4.2.4-15.1 openSUSE Leap 42.1:libregistry-devel-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-4.2.4-15.1 openSUSE Leap 42.1:libsamdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-4.2.4-15.1 openSUSE Leap 42.1:libwbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-4.2.4-15.1 openSUSE Leap 42.1:samba-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-4.2.4-15.1 openSUSE Leap 42.1:samba-client-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-client-4.2.4-15.1 openSUSE Leap 42.1:samba-core-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-doc-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-4.2.4-15.1 openSUSE Leap 42.1:samba-pidl-4.2.4-15.1 openSUSE Leap 42.1:samba-python-4.2.4-15.1 openSUSE Leap 42.1:samba-test-4.2.4-15.1 openSUSE Leap 42.1:samba-test-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-4.2.4-15.1 moderate 4.3 AV:A/AC:M/Au:N/C:P/I:P/A:N Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html https://www.suse.com/security/cve/CVE-2016-2113.html CVE-2016-2113 https://bugzilla.suse.com/973031 SUSE Bug 973031 https://bugzilla.suse.com/973033 SUSE Bug 973033 https://bugzilla.suse.com/973034 SUSE Bug 973034 https://bugzilla.suse.com/975276 SUSE Bug 975276 Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream. CVE-2016-2115 openSUSE Leap 42.1:ctdb-4.2.4-15.1 openSUSE Leap 42.1:ctdb-devel-4.2.4-15.1 openSUSE Leap 42.1:ctdb-tests-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-4.2.4-15.1 openSUSE Leap 42.1:libgensec-devel-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-4.2.4-15.1 openSUSE Leap 42.1:libndr-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-4.2.4-15.1 openSUSE Leap 42.1:libndr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr0-4.2.4-15.1 openSUSE Leap 42.1:libnetapi-devel-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-4.2.4-15.1 openSUSE Leap 42.1:libregistry-devel-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-4.2.4-15.1 openSUSE Leap 42.1:libsamdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-4.2.4-15.1 openSUSE Leap 42.1:libwbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-4.2.4-15.1 openSUSE Leap 42.1:samba-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-4.2.4-15.1 openSUSE Leap 42.1:samba-client-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-client-4.2.4-15.1 openSUSE Leap 42.1:samba-core-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-doc-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-4.2.4-15.1 openSUSE Leap 42.1:samba-pidl-4.2.4-15.1 openSUSE Leap 42.1:samba-python-4.2.4-15.1 openSUSE Leap 42.1:samba-test-4.2.4-15.1 openSUSE Leap 42.1:samba-test-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-4.2.4-15.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html https://www.suse.com/security/cve/CVE-2016-2115.html CVE-2016-2115 https://bugzilla.suse.com/973036 SUSE Bug 973036 https://bugzilla.suse.com/975276 SUSE Bug 975276 The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK." CVE-2016-2118 openSUSE Leap 42.1:ctdb-4.2.4-15.1 openSUSE Leap 42.1:ctdb-devel-4.2.4-15.1 openSUSE Leap 42.1:ctdb-tests-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-atsvc0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-binding0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr-devel-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc-samr0-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libdcerpc0-4.2.4-15.1 openSUSE Leap 42.1:libgensec-devel-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libgensec0-4.2.4-15.1 openSUSE Leap 42.1:libndr-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-krb5pac0-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-nbt0-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard-devel-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr-standard0-4.2.4-15.1 openSUSE Leap 42.1:libndr0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libndr0-4.2.4-15.1 openSUSE Leap 42.1:libnetapi-devel-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libnetapi0-4.2.4-15.1 openSUSE Leap 42.1:libregistry-devel-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libregistry0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-credentials0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-hostconfig0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-passdb0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-policy0-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamba-util0-4.2.4-15.1 openSUSE Leap 42.1:libsamdb-devel-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsamdb0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient-raw0-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbclient0-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbconf0-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap-devel-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libsmbldap0-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util-devel-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libtevent-util0-4.2.4-15.1 openSUSE Leap 42.1:libwbclient-devel-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-32bit-4.2.4-15.1 openSUSE Leap 42.1:libwbclient0-4.2.4-15.1 openSUSE Leap 42.1:samba-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-4.2.4-15.1 openSUSE Leap 42.1:samba-client-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-client-4.2.4-15.1 openSUSE Leap 42.1:samba-core-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-doc-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-libs-4.2.4-15.1 openSUSE Leap 42.1:samba-pidl-4.2.4-15.1 openSUSE Leap 42.1:samba-python-4.2.4-15.1 openSUSE Leap 42.1:samba-test-4.2.4-15.1 openSUSE Leap 42.1:samba-test-devel-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-32bit-4.2.4-15.1 openSUSE Leap 42.1:samba-winbind-4.2.4-15.1 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html https://www.suse.com/security/cve/CVE-2016-2118.html CVE-2016-2118 https://bugzilla.suse.com/971965 SUSE Bug 971965 https://bugzilla.suse.com/975276 SUSE Bug 975276