File _patchinfo of Package patchinfo.16882

<patchinfo incident="16882">
  <issue tracker="cve" id="2020-14318"/>
  <issue tracker="cve" id="2020-14323"/>
  <issue tracker="cve" id="2020-14383"/>
  <issue tracker="bnc" id="1177613">VUL-0: EMBARGOED: CVE-2020-14383: samba: Remote crash after adding MX records</issue>
  <issue tracker="bnc" id="1173994">VUL-0: EMBARGOED: CVE-2020-14323: samba: Denial of service in winbindd.</issue>
  <issue tracker="bnc" id="1173902">VUL-1: EMBARGOED: CVE-2020-14318: samba: ChangeNotify does not check handle permissions</issue>
  <packager>scabrero</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for samba</summary>
  <description>This update for samba fixes the following issues:

- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613).
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994).
- CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).
</description>
</patchinfo>
openSUSE Build Service is sponsored by