File _patchinfo of Package patchinfo.16882
<patchinfo incident="16882">
<issue tracker="cve" id="2020-14318"/>
<issue tracker="cve" id="2020-14323"/>
<issue tracker="cve" id="2020-14383"/>
<issue tracker="bnc" id="1177613">VUL-0: EMBARGOED: CVE-2020-14383: samba: Remote crash after adding MX records</issue>
<issue tracker="bnc" id="1173994">VUL-0: EMBARGOED: CVE-2020-14323: samba: Denial of service in winbindd.</issue>
<issue tracker="bnc" id="1173902">VUL-1: EMBARGOED: CVE-2020-14318: samba: ChangeNotify does not check handle permissions</issue>
<packager>scabrero</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for samba</summary>
<description>This update for samba fixes the following issues:
- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613).
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994).
- CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).
</description>
</patchinfo>