{"affected":[{"ecosystem_specific":{"binaries":[{"libdcerpc-binding0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libdcerpc-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libdcerpc-samr-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libdcerpc-samr0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libdcerpc0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libndr-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libndr-krb5pac-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libndr-krb5pac0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libndr-nbt-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libndr-nbt0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libndr-standard-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libndr-standard0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libndr0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libnetapi-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libnetapi0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamba-credentials-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamba-credentials0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamba-errors-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamba-errors0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamba-hostconfig-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamba-hostconfig0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamba-passdb-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamba-passdb0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamba-policy-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamba-policy0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamba-util-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamba-util0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamdb-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsamdb0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsmbclient-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsmbclient0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsmbconf-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsmbconf0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsmbldap-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libsmbldap2":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libtevent-util-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libtevent-util0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libwbclient-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","libwbclient0":"4.7.11+git.140.6bd0e5b30d8-4.21.1","samba":"4.7.11+git.140.6bd0e5b30d8-4.21.1","samba-client":"4.7.11+git.140.6bd0e5b30d8-4.21.1","samba-core-devel":"4.7.11+git.140.6bd0e5b30d8-4.21.1","samba-libs":"4.7.11+git.140.6bd0e5b30d8-4.21.1","samba-winbind":"4.7.11+git.140.6bd0e5b30d8-4.21.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","name":"samba","purl":"pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.7.11+git.140.6bd0e5b30d8-4.21.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"samba-python":"4.7.11+git.140.6bd0e5b30d8-4.21.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15","name":"samba","purl":"pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.7.11+git.140.6bd0e5b30d8-4.21.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"ctdb":"4.7.11+git.140.6bd0e5b30d8-4.21.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","name":"samba","purl":"pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.7.11+git.140.6bd0e5b30d8-4.21.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for samba fixes the following issues:\n\nUpdate to samba version 4.7.11.\n\nSecurity issues fixed:\n\n- CVE-2018-14629: Fixed CNAME loops in Samba AD DC DNS server (bsc#1116319).\n- CVE-2018-16841: Fixed segfault on PKINIT when mis-matching principal (bsc#1116320).\n- CVE-2018-16851: Fixed NULL pointer de-reference in Samba AD DC LDAP server (bsc#1116322).\n- CVE-2018-16853: Mark MIT support for the AD DC experimental (bsc#1116324).\n\nNon-security issues fixed:\n\n- Fixed do not take over stderr when there is no log file (bsc#1101499).\n- Fixed ctdb_mutex_ceph_rados_helper deadlock; (bsc#1102230).\n- Fixed ntlm authentications with 'winbind use default domain = yes'; (bsc#1068059).\n- Fixed idmap_rid to have primary group other than 'Domain Users'; (bsc#1087931).\n- Fixed windows domain with one way trust that was not working (bsc#1087303).\n","id":"SUSE-SU-2018:4066-1","modified":"2018-12-10T14:57:58Z","published":"2018-12-10T14:57:58Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20184066-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1068059"},{"type":"REPORT","url":"https://bugzilla.suse.com/1087303"},{"type":"REPORT","url":"https://bugzilla.suse.com/1087931"},{"type":"REPORT","url":"https://bugzilla.suse.com/1101499"},{"type":"REPORT","url":"https://bugzilla.suse.com/1102230"},{"type":"REPORT","url":"https://bugzilla.suse.com/1116319"},{"type":"REPORT","url":"https://bugzilla.suse.com/1116320"},{"type":"REPORT","url":"https://bugzilla.suse.com/1116322"},{"type":"REPORT","url":"https://bugzilla.suse.com/1116324"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-14629"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16841"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16851"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16853"}],"related":["CVE-2018-14629","CVE-2018-16841","CVE-2018-16851","CVE-2018-16853"],"summary":"Security update for samba","upstream":["CVE-2018-14629","CVE-2018-16841","CVE-2018-16851","CVE-2018-16853"]}