{"schemaVersion":3,"id":"SUSE-SU-2015:2305-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for ldb, samba, talloc, tdb, tevent\n\n\nThis update for ldb, samba, talloc, tdb, tevent fixes the following security issues and bugs:\n\nThe Samba LDB was updated to version 1.1.24:\n\n- Fix ldap \\00 search expression attack dos; CVE-2015-3223; (bso#11325)\n- Fix remote read memory exploit in ldb; CVE-2015-5330; (bso#11599)\n- Move ldb_(un)pack_data into ldb_module.h for testing\n- Fix installation of _ldb_text.py\n- Fix propagation of ldb errors through tdb\n- Fix bug triggered by having an empty message in database during search\n\nSamba was updated to fix these issues:\n\n- Malicious request can cause Samba LDAP server to hang, spinning using CPU;\n  CVE-2015-3223; (bso#11325); (bnc#958581).\n- Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586).\n- Insufficient symlink verification (file access outside the share);\n  CVE-2015-5252; (bso#11395); (bnc#958582).\n- No man in the middle protection when forcing smb encryption on the client\n  side; CVE-2015-5296; (bso#11536); (bnc#958584).\n- Currently the snapshot browsing is not secure thru windows previous version\n  (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).\n- Fix Microsoft MS15-096 to prevent machine accounts from being changed into\n  user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).\n- Changing log level of two entries to from 1 to 3; (bso#9912).\n- vfs_gpfs: Re-enable share modes; (bso#11243).\n- wafsamba: Also build libraries with RELRO protection; (bso#11346).\n- ctdb: Strip trailing spaces from nodes file; (bso#11365).\n- s3-smbd: Fix old DOS client doing wildcard delete - gives a attribute type\n  of zero; (bso#11452).\n- nss_wins: Do not run into use after free issues when we access memory\n  allocated on the globals and the global being reinitialized; (bso#11563).\n- async_req: Fix non-blocking connect(); (bso#11564).\n- auth: gensec: Fix a memory leak; (bso#11565).\n- lib: util: Make non-critical message a warning; (bso#11566).\n- Fix winbindd crashes with samlogon for trusted domain user; (bso#11569);\n  (bnc#949022).\n- smbd: Send SMB2 oplock breaks unencrypted; (bso#11570).\n- ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577).\n- manpage: Correct small typo error; (bso#11584).\n- s3: smbd: If EA's are turned off on a share don't allow an SMB2 create\n  containing them; (bso#11589).\n- Backport some valgrind fixes from upstream master; (bso#11597).\n- s3: smbd: have_file_open_below() fails to enumerate open files below an open\n  directory handle; (bso#11615).\n- docs: Fix some typos in the idmap config section of man 5 smb.conf;\n  (bso#11619).\n- Cleanup and enhance the pidl sub package.\n- s3: smbd: Fix our access-based enumeration on 'hide unreadable' to match\n  Windows; (bso#10252).\n- smbd: Fix file name buflen and padding in notify repsonse; (bso#10634).\n- kerberos: Make sure we only use prompter type when available; (bso#11038).\n- s3:ctdbd_conn: Make sure we destroy tevent_fd before closing the socket;\n  (bso#11316).\n- dcerpc.idl: accept invalid dcerpc_bind_nak pdus; (bso#11327).\n- Fix a deadlock in tdb; (bso#11381).\n- s3: smbd: Fix mkdir race condition; (bso#11486).\n- pam_winbind: Fix a segfault if initialization fails; (bso#11502).\n- s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509).\n- s3: smbd: Fix opening/creating :stream files on the root share directory;\n  (bso#11522).\n- net: Fix a crash with 'net ads keytab create'; (bso#11528).\n- s3: smbd: Fix a crash in unix_convert() and a NULL pointer bug introduced by\n  previous 'raw' stream fix (bso#11522); (bso#11535).\n- vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543).\n- vfs_commit: Set the fd on open before calling SMB_VFS_FSTAT; (bso#11547).\n- Fix bug in smbstatus where the lease info is not printed; (bso#11549).\n- s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550).\n- Prevent null pointer access in samlogon fallback when security\n  credentials are null; (bnc#949022).\n- Fix 100% CPU in winbindd when logging in with 'user must change password on\n  next logon'; (bso#11038).\n\ntalloc was updated to version 2.1.5; (bsc#954658) (bsc#951660).\n\n- Test that talloc magic differs between processes.\n- Increment minor version due to added talloc_test_get_magic.\n- Provide tests access to talloc_magic.\n- Test magic protection measures.\n\ntdb was updated to version 1.3.8; (bsc#954658).\n\n- Improved python3 bindings\n\ntevent was updated to 0.9.26; (bsc#954658).\n\n- New tevent_thread_proxy api\n- Minor build fixes","dates":{"published":"2015-12-18T17:18:25.000Z","modified":"2025-05-02T04:04:31.519Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"ldb&distro=SUSE Linux Enterprise Desktop 12 SP1","name":"ldb","label":"ldb&distro=SUSE Linux Enterprise Desktop 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ldb&distro=SUSE Linux Enterprise Desktop 12 SP1","purlType":"rpm","versions":[{"text":"< 1.1.24-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.24-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ldb&distro=SUSE Linux Enterprise Server 12 SP1","name":"ldb","label":"ldb&distro=SUSE Linux Enterprise Server 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ldb&distro=SUSE Linux Enterprise Server 12 SP1","purlType":"rpm","versions":[{"text":"< 1.1.24-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.24-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ldb&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"ldb","label":"ldb&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ldb&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 1.1.24-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.24-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ldb&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","name":"ldb","label":"ldb&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ldb&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","purlType":"rpm","versions":[{"text":"< 1.1.24-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.24-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"samba&distro=SUSE Linux Enterprise Desktop 12 SP1","name":"samba","label":"samba&distro=SUSE Linux Enterprise Desktop 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/samba&distro=SUSE Linux Enterprise Desktop 12 SP1","purlType":"rpm","versions":[{"text":"< 4.2.4-6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.4-6.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"samba","label":"Samba","category":"server-app"}},"hubHref":null},{"vendor":"suse","product":"samba&distro=SUSE Linux Enterprise Server 12 SP1","name":"samba","label":"samba&distro=SUSE Linux Enterprise Server 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/samba&distro=SUSE Linux Enterprise Server 12 SP1","purlType":"rpm","versions":[{"text":"< 4.2.4-6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.4-6.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"samba","label":"Samba","category":"server-app"}},"hubHref":null},{"vendor":"suse","product":"samba&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"samba","label":"samba&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/samba&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 4.2.4-6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.4-6.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"samba","label":"Samba","category":"server-app"}},"hubHref":null},{"vendor":"suse","product":"samba&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","name":"samba","label":"samba&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/samba&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","purlType":"rpm","versions":[{"text":"< 4.2.4-6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.4-6.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"samba","label":"Samba","category":"server-app"}},"hubHref":null},{"vendor":"suse","product":"talloc&distro=SUSE Linux Enterprise Desktop 12 SP1","name":"talloc","label":"talloc&distro=SUSE Linux Enterprise Desktop 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/talloc&distro=SUSE Linux Enterprise Desktop 12 SP1","purlType":"rpm","versions":[{"text":"< 2.1.5-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.5-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"talloc&distro=SUSE Linux Enterprise Server 12 SP1","name":"talloc","label":"talloc&distro=SUSE Linux Enterprise Server 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/talloc&distro=SUSE Linux Enterprise Server 12 SP1","purlType":"rpm","versions":[{"text":"< 2.1.5-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.5-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"talloc&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"talloc","label":"talloc&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/talloc&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 2.1.5-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.5-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"talloc&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","name":"talloc","label":"talloc&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/talloc&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","purlType":"rpm","versions":[{"text":"< 2.1.5-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.5-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tdb&distro=SUSE Linux Enterprise Desktop 12 SP1","name":"tdb","label":"tdb&distro=SUSE Linux Enterprise Desktop 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tdb&distro=SUSE Linux Enterprise Desktop 12 SP1","purlType":"rpm","versions":[{"text":"< 1.3.8-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.8-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tdb&distro=SUSE Linux Enterprise Server 12 SP1","name":"tdb","label":"tdb&distro=SUSE Linux Enterprise Server 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tdb&distro=SUSE Linux Enterprise Server 12 SP1","purlType":"rpm","versions":[{"text":"< 1.3.8-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.8-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tdb&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"tdb","label":"tdb&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tdb&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 1.3.8-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.8-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tdb&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","name":"tdb","label":"tdb&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tdb&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","purlType":"rpm","versions":[{"text":"< 1.3.8-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.8-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tevent&distro=SUSE Linux Enterprise Desktop 12 SP1","name":"tevent","label":"tevent&distro=SUSE Linux Enterprise Desktop 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tevent&distro=SUSE Linux Enterprise Desktop 12 SP1","purlType":"rpm","versions":[{"text":"< 0.9.26-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.26-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tevent&distro=SUSE Linux Enterprise Server 12 SP1","name":"tevent","label":"tevent&distro=SUSE Linux Enterprise Server 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tevent&distro=SUSE Linux Enterprise Server 12 SP1","purlType":"rpm","versions":[{"text":"< 0.9.26-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.26-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tevent&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"tevent","label":"tevent&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tevent&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 0.9.26-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.26-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"tevent&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","name":"tevent","label":"tevent&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tevent&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","purlType":"rpm","versions":[{"text":"< 0.9.26-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.26-4.1","eol":null,"hubHref":null}],"affectedCount":20,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152305-1/","label":"www.suse.com/support/update/announcement/2015/suse-su-20152305-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/949022","label":"bugzilla.suse.com/949022","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/951660","label":"bugzilla.suse.com/951660","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/954658","label":"bugzilla.suse.com/954658","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/958581","label":"bugzilla.suse.com/958581","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/958582","label":"bugzilla.suse.com/958582","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/958583","label":"bugzilla.suse.com/958583","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/958584","label":"bugzilla.suse.com/958584","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/958585","label":"bugzilla.suse.com/958585","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/958586","label":"bugzilla.suse.com/958586","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3223","label":"www.suse.com/security/cve/CVE-2015-3223","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5252","label":"www.suse.com/security/cve/CVE-2015-5252","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5296","label":"www.suse.com/security/cve/CVE-2015-5296","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5299","label":"www.suse.com/security/cve/CVE-2015-5299","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5330","label":"www.suse.com/security/cve/CVE-2015-5330","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8467","label":"www.suse.com/security/cve/CVE-2015-8467","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2015-3223","CVE-2015-5252","CVE-2015-5296","CVE-2015-5299","CVE-2015-5330","CVE-2015-8467"],"downstream":[],"duplicates":[],"related":["CVE-2015-3223","CVE-2015-5252","CVE-2015-5296","CVE-2015-5299","CVE-2015-5330","CVE-2015-8467"]},"timeline":[{"kind":"published","date":"2015-12-18T17:18:25.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-05-02T04:04:31.519Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T05:56:15.484Z","stale":false,"partial":false}}