{"schema_version":"1.7.3","id":"SUSE-SU-2021:3673-1","published":"2021-11-16T14:14:53Z","modified":"2025-05-02T04:10:07.914179Z","related":["CVE-2016-2124","CVE-2020-25717"],"upstream":["CVE-2016-2124","CVE-2020-25717"],"summary":"Security update for samba","details":"This update for samba fixes the following issues:\n\n- CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440).\n- CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284).\n","affected":[{"package":{"name":"samba","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","purl":"pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-38.45.2"}]}],"ecosystem_specific":{"binaries":[{"libdcerpc-binding0":"4.4.2-38.45.2","libdcerpc-binding0-32bit":"4.4.2-38.45.2","libdcerpc0":"4.4.2-38.45.2","libdcerpc0-32bit":"4.4.2-38.45.2","libndr-krb5pac0":"4.4.2-38.45.2","libndr-krb5pac0-32bit":"4.4.2-38.45.2","libndr-nbt0":"4.4.2-38.45.2","libndr-nbt0-32bit":"4.4.2-38.45.2","libndr-standard0":"4.4.2-38.45.2","libndr-standard0-32bit":"4.4.2-38.45.2","libndr0":"4.4.2-38.45.2","libndr0-32bit":"4.4.2-38.45.2","libnetapi0":"4.4.2-38.45.2","libnetapi0-32bit":"4.4.2-38.45.2","libsamba-credentials0":"4.4.2-38.45.2","libsamba-credentials0-32bit":"4.4.2-38.45.2","libsamba-errors0":"4.4.2-38.45.2","libsamba-errors0-32bit":"4.4.2-38.45.2","libsamba-hostconfig0":"4.4.2-38.45.2","libsamba-hostconfig0-32bit":"4.4.2-38.45.2","libsamba-passdb0":"4.4.2-38.45.2","libsamba-passdb0-32bit":"4.4.2-38.45.2","libsamba-util0":"4.4.2-38.45.2","libsamba-util0-32bit":"4.4.2-38.45.2","libsamdb0":"4.4.2-38.45.2","libsamdb0-32bit":"4.4.2-38.45.2","libsmbclient0":"4.4.2-38.45.2","libsmbclient0-32bit":"4.4.2-38.45.2","libsmbconf0":"4.4.2-38.45.2","libsmbconf0-32bit":"4.4.2-38.45.2","libsmbldap0":"4.4.2-38.45.2","libsmbldap0-32bit":"4.4.2-38.45.2","libtevent-util0":"4.4.2-38.45.2","libtevent-util0-32bit":"4.4.2-38.45.2","libwbclient0":"4.4.2-38.45.2","libwbclient0-32bit":"4.4.2-38.45.2","samba":"4.4.2-38.45.2","samba-client":"4.4.2-38.45.2","samba-client-32bit":"4.4.2-38.45.2","samba-doc":"4.4.2-38.45.2","samba-libs":"4.4.2-38.45.2","samba-libs-32bit":"4.4.2-38.45.2","samba-winbind":"4.4.2-38.45.2","samba-winbind-32bit":"4.4.2-38.45.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3673-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213673-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1014440"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192284"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-2124"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-25717"}]}