OPENSUSE-SU-2019:2442-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 05 Nov 2019, 15:32
Last modified:04 Feb 2026, 02:43

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

05 Nov 2019, 15:32
Published
Vulnerability first disclosed
04 Feb 2026, 02:43
Last Modified
Vulnerability information updated

Description

Security update for samba This update for provides the following fixes: Following security issues were fixed: - CVE-2019-14847: User with 'get changes' permission could have crashed AD DC LDAP server via dirsync (bsc#1154598). - CVE-2019-10218: Client code could have returned filenames containing path separators (bsc#1144902). - CVE-2019-14833: Accent with 'check script password' where Samba AD DC check password script did not receive the full password (bsc#1154289). Also following non-security issues were fixed: - Fix auth problems when printing via smbspool backend with kerberos. (bsc#1148539) - Fix broken username/password authentication with CUPS and smbspool. (bsc#1152143) This update was imported from the SUSE:SLE-15-SP1:Update update project.

Affected Systems

  • opensuse•samba&distro=openSUSE Leap 15.1

    < 4.9.5+git.210.ab0549acb05-lp151.2.9.1

References (9)