{"schema_version":"1.7.3","id":"openSUSE-SU-2021:3647-1","published":"2021-11-10T16:34:22Z","modified":"2025-05-07T18:09:18.402649Z","related":["CVE-2016-2124","CVE-2020-25717","CVE-2020-25718","CVE-2020-25719","CVE-2020-25721","CVE-2020-25722","CVE-2021-23192","CVE-2021-3738"],"upstream":["CVE-2016-2124","CVE-2020-25717","CVE-2020-25718","CVE-2020-25719","CVE-2020-25721","CVE-2020-25722","CVE-2021-23192","CVE-2021-3738"],"summary":"Security update for samba and ldb","details":"This update for samba and ldb fixes the following issues:\n\n- CVE-2020-25718: Fixed that an RODC can issue (forge) administrator tickets to other servers (bsc#1192246).\n- CVE-2021-3738: Fixed crash in dsdb stack (bsc#1192215).\n- CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440).\n- CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284).\n- CVE-2020-25719: Fixed AD DC Username based races when no PAC is given (bsc#1192247).\n- CVE-2020-25722: Fixed AD DC UPN vs samAccountName not checked (top-level bug for AD DC validation issues) (bsc#1192283).\n- CVE-2021-23192: Fixed dcerpc requests to don't check all fragments against the first auth_state (bsc#1192214).\n- CVE-2020-25721: Fixed fill in the new HAS_SAM_NAME_AND_SID values (bsc#1192505).\n\nSamba was updated to 4.13.13\n\n* rodc_rwdc test flaps;(bso#14868).\n* Backport bronze bit fixes, tests, and selftest improvements;\n  (bso#14881).\n* Provide a fix for MS CVE-2020-17049 in Samba [SECURITY]\n  'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba\n  with embedded Heimdal;(bso#14642).\n* Python ldb.msg_diff() memory handling failure;(bso#14836).\n* 'in' operator on ldb.Message is case sensitive;(bso#14845).\n* Fix Samba support for UF_NO_AUTH_DATA_REQUIRED;(bso#14871).\n* Allow special chars like '@' in samAccountName when generating\n  the salt;(bso#14874).\n* Fix transit path validation;(bso#12998).\n* Prepare to operate with MIT krb5 >= 1.20;(bso#14870).\n* rpcclient NetFileEnum and net rpc file both cause lock order\n  violation: brlock.tdb, share_entries.tdb;(bso#14645).\n* Python ldb.msg_diff() memory handling failure;(bso#14836).\n* Release LDB 2.3.1 for Samba 4.14.9;(bso#14848).\n\nSamba was updated to 4.13.12:\n\n* Address a signifcant performance regression in database access\n  in the AD DC since Samba 4.12;(bso#14806).\n* Fix performance regression in lsa_LookupSids3/LookupNames4\n  since Samba 4.9 by using an explicit database handle cache;\n  (bso#14807).\n* An unuthenticated user can crash the AD DC KDC by omitting the\n  server name in a TGS-REQ;(bso#14817).\n* Address flapping samba_tool_drs_showrepl test;(bso#14818).\n* Address flapping dsdb_schema_attributes test;(bso#14819).\n* An unuthenticated user can crash the AD DC KDC by omitting the\n  server name in a TGS-REQ;(bso#14817).\n* Fix CTDB flag/status update race conditions(bso#14784).\n\nSamba was updated to 4.13.11:\n\n* smbd: panic on force-close share during offload write; (bso#14769).\n* Fix returned attributes on fake quota file handle and avoid\n  hitting the VFS;(bso#14731).\n* smbd: 'deadtime' parameter doesn't work anymore;(bso#14783).\n* net conf list crashes when run as normal user;(bso#14787).\n* Work around special SMB2 READ response behavior of NetApp Ontap\n  7.3.7;(bso#14607).\n* Start the SMB encryption as soon as possible;(bso#14793).\n* Winbind should not start if the socket path for the privileged\n  pipe is too long;(bso#14792).\n\nldb was updated to 2.2.2:\n\n+ CVE-2020-25718: samba: An RODC can issue (forge) administrator tickets to other servers; (bsc#1192246); (bso#14558)\n+ CVE-2021-3738: samba: crash in dsdb stack; (bsc#1192215);(bso#14848)\n\nRelease ldb 2.2.2\n\n+ Corrected python behaviour for 'in' for LDAP attributes contained as part of ldb.Message;(bso#14845).\n+ Fix memory handling in ldb.msg_diff Corrected python docstrings;(bso#14836)\n+ Backport bronze bit fixes, tests, and selftest improvements; (bso#14881).\n","affected":[{"package":{"name":"ldb","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/ldb&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-3.3.1"}]}],"ecosystem_specific":{"binaries":[{"ctdb":"4.13.13+git.528.140935f8d6a-3.12.1","ctdb-pcp-pmda":"4.13.13+git.528.140935f8d6a-3.12.1","ctdb-tests":"4.13.13+git.528.140935f8d6a-3.12.1","ldb-tools":"2.2.2-3.3.1","libdcerpc-binding0":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-binding0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-binding0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-samr-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-samr0":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-samr0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-samr0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc0":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libldb-devel":"2.2.2-3.3.1","libldb2":"2.2.2-3.3.1","libldb2-32bit":"2.2.2-3.3.1","libndr-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-krb5pac-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-krb5pac0":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-krb5pac0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-krb5pac0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-nbt-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-nbt0":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-nbt0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-nbt0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-standard-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-standard0":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-standard0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-standard0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr1":"4.13.13+git.528.140935f8d6a-3.12.1","libndr1-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr1-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libnetapi-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libnetapi-devel-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libnetapi-devel-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libnetapi0":"4.13.13+git.528.140935f8d6a-3.12.1","libnetapi0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libnetapi0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-credentials-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-credentials0":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-credentials0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-credentials0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-errors-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-errors0":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-errors0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-errors0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-hostconfig-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-hostconfig0":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-hostconfig0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-hostconfig0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-passdb-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-passdb0":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-passdb0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-passdb0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-policy-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-policy-python3-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-policy0-python3":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-policy0-python3-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-policy0-python3-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-util-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-util0":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-util0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-util0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamdb-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamdb0":"4.13.13+git.528.140935f8d6a-3.12.1","libsamdb0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamdb0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbclient-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbclient0":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbclient0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbclient0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbconf-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbconf0":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbconf0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbconf0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbldap-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbldap2":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbldap2-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbldap2-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libtevent-util-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libtevent-util0":"4.13.13+git.528.140935f8d6a-3.12.1","libtevent-util0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libtevent-util0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libwbclient-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libwbclient0":"4.13.13+git.528.140935f8d6a-3.12.1","libwbclient0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libwbclient0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","python3-ldb":"2.2.2-3.3.1","python3-ldb-32bit":"2.2.2-3.3.1","python3-ldb-devel":"2.2.2-3.3.1","samba":"4.13.13+git.528.140935f8d6a-3.12.1","samba-ad-dc":"4.13.13+git.528.140935f8d6a-3.12.1","samba-ad-dc-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-ad-dc-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-ceph":"4.13.13+git.528.140935f8d6a-3.12.1","samba-client":"4.13.13+git.528.140935f8d6a-3.12.1","samba-client-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-client-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-core-devel":"4.13.13+git.528.140935f8d6a-3.12.1","samba-doc":"4.13.13+git.528.140935f8d6a-3.12.1","samba-dsdb-modules":"4.13.13+git.528.140935f8d6a-3.12.1","samba-gpupdate":"4.13.13+git.528.140935f8d6a-3.12.1","samba-ldb-ldap":"4.13.13+git.528.140935f8d6a-3.12.1","samba-libs":"4.13.13+git.528.140935f8d6a-3.12.1","samba-libs-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-libs-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-libs-python3":"4.13.13+git.528.140935f8d6a-3.12.1","samba-libs-python3-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-libs-python3-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-python3":"4.13.13+git.528.140935f8d6a-3.12.1","samba-test":"4.13.13+git.528.140935f8d6a-3.12.1","samba-winbind":"4.13.13+git.528.140935f8d6a-3.12.1","samba-winbind-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-winbind-64bit":"4.13.13+git.528.140935f8d6a-3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:3647-1.json"}},{"package":{"name":"samba","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/samba&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.13+git.528.140935f8d6a-3.12.1"}]}],"ecosystem_specific":{"binaries":[{"ctdb":"4.13.13+git.528.140935f8d6a-3.12.1","ctdb-pcp-pmda":"4.13.13+git.528.140935f8d6a-3.12.1","ctdb-tests":"4.13.13+git.528.140935f8d6a-3.12.1","ldb-tools":"2.2.2-3.3.1","libdcerpc-binding0":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-binding0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-binding0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-samr-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-samr0":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-samr0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc-samr0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc0":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libdcerpc0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libldb-devel":"2.2.2-3.3.1","libldb2":"2.2.2-3.3.1","libldb2-32bit":"2.2.2-3.3.1","libndr-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-krb5pac-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-krb5pac0":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-krb5pac0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-krb5pac0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-nbt-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-nbt0":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-nbt0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-nbt0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-standard-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-standard0":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-standard0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr-standard0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr1":"4.13.13+git.528.140935f8d6a-3.12.1","libndr1-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libndr1-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libnetapi-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libnetapi-devel-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libnetapi-devel-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libnetapi0":"4.13.13+git.528.140935f8d6a-3.12.1","libnetapi0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libnetapi0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-credentials-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-credentials0":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-credentials0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-credentials0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-errors-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-errors0":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-errors0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-errors0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-hostconfig-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-hostconfig0":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-hostconfig0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-hostconfig0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-passdb-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-passdb0":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-passdb0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-passdb0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-policy-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-policy-python3-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-policy0-python3":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-policy0-python3-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-policy0-python3-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-util-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-util0":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-util0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamba-util0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamdb-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsamdb0":"4.13.13+git.528.140935f8d6a-3.12.1","libsamdb0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsamdb0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbclient-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbclient0":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbclient0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbclient0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbconf-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbconf0":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbconf0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbconf0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbldap-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbldap2":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbldap2-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libsmbldap2-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libtevent-util-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libtevent-util0":"4.13.13+git.528.140935f8d6a-3.12.1","libtevent-util0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libtevent-util0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","libwbclient-devel":"4.13.13+git.528.140935f8d6a-3.12.1","libwbclient0":"4.13.13+git.528.140935f8d6a-3.12.1","libwbclient0-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","libwbclient0-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","python3-ldb":"2.2.2-3.3.1","python3-ldb-32bit":"2.2.2-3.3.1","python3-ldb-devel":"2.2.2-3.3.1","samba":"4.13.13+git.528.140935f8d6a-3.12.1","samba-ad-dc":"4.13.13+git.528.140935f8d6a-3.12.1","samba-ad-dc-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-ad-dc-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-ceph":"4.13.13+git.528.140935f8d6a-3.12.1","samba-client":"4.13.13+git.528.140935f8d6a-3.12.1","samba-client-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-client-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-core-devel":"4.13.13+git.528.140935f8d6a-3.12.1","samba-doc":"4.13.13+git.528.140935f8d6a-3.12.1","samba-dsdb-modules":"4.13.13+git.528.140935f8d6a-3.12.1","samba-gpupdate":"4.13.13+git.528.140935f8d6a-3.12.1","samba-ldb-ldap":"4.13.13+git.528.140935f8d6a-3.12.1","samba-libs":"4.13.13+git.528.140935f8d6a-3.12.1","samba-libs-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-libs-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-libs-python3":"4.13.13+git.528.140935f8d6a-3.12.1","samba-libs-python3-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-libs-python3-64bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-python3":"4.13.13+git.528.140935f8d6a-3.12.1","samba-test":"4.13.13+git.528.140935f8d6a-3.12.1","samba-winbind":"4.13.13+git.528.140935f8d6a-3.12.1","samba-winbind-32bit":"4.13.13+git.528.140935f8d6a-3.12.1","samba-winbind-64bit":"4.13.13+git.528.140935f8d6a-3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:3647-1.json"}}],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/36K5HNX67LYX5XOVQRL3MSIC5YSJ5M5W/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1014440"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192214"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192215"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192246"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192247"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192283"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192284"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192505"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-2124"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-25717"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-25718"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-25719"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-25721"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-25722"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-23192"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-3738"}]}