File _patchinfo of Package patchinfo.15583
<patchinfo incident="15583">
<issue tracker="cve" id="2020-10745"/>
<issue tracker="cve" id="2020-10760"/>
<issue tracker="cve" id="2020-10730"/>
<issue tracker="cve" id="2020-14303"/>
<issue tracker="bnc" id="1171437">Installing: samba-4.12.2+git.152.c5bf9f6da52-1.1.x86_6 - service does not exist and unit not found</issue>
<issue tracker="bnc" id="1172307">Missing 32-bit libnetapi development package</issue>
<issue tracker="bnc" id="1173161">VUL-0: EMBARGOED: CVE-2020-10760: samba: Use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV</issue>
<issue tracker="bnc" id="1173159">VUL-1: EMBARGOED: CVE-2020-10730: samba: NULL de-reference in AD DC LDAP server when ASQ and VLV combined</issue>
<issue tracker="bnc" id="1173359">VUL-1: EMBARGOED: CVE-2020-14303: samba: Endless loop from empty UDP packet sent to AD DC nbt_server</issue>
<issue tracker="bnc" id="1173160">VUL-0: EMBARGOED: CVE-2020-10745: samba: invalid DNS or NBT queries containing dots use several seconds of CPU each</issue>
<packager>npower</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for samba</summary>
<description>This update for samba fixes the following issues:
- CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets
containing dots could potentially have consumed excessive CPU (bsc#1173160).
- CVE-2020-14303: Fixed an endless loop when receiving at AD DC empty UDP packets (bsc#1173359).
- CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159).
- CVE-2020-10760: Fixed a use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV (bsc#1173161).
- Added libnetapi-devel to baselibs conf, for wine usage (bsc#1172307).
- Fixed an installing issue where samba - samba-ad-dc.service did not exist and unit was not found (bsc#1171437).
</description>
</patchinfo>