{"schemaVersion":3,"id":"SUSE-SU-2021:3647-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for samba and ldb\n\nThis update for samba and ldb fixes the following issues:\n\n- CVE-2020-25718: Fixed that an RODC can issue (forge) administrator tickets to other servers (bsc#1192246).\n- CVE-2021-3738: Fixed crash in dsdb stack (bsc#1192215).\n- CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440).\n- CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284).\n- CVE-2020-25719: Fixed AD DC Username based races when no PAC is given (bsc#1192247).\n- CVE-2020-25722: Fixed AD DC UPN vs samAccountName not checked (top-level bug for AD DC validation issues) (bsc#1192283).\n- CVE-2021-23192: Fixed dcerpc requests to don't check all fragments against the first auth_state (bsc#1192214).\n- CVE-2020-25721: Fixed fill in the new HAS_SAM_NAME_AND_SID values (bsc#1192505).\n\nSamba was updated to 4.13.13\n\n* rodc_rwdc test flaps;(bso#14868).\n* Backport bronze bit fixes, tests, and selftest improvements;\n  (bso#14881).\n* Provide a fix for MS CVE-2020-17049 in Samba [SECURITY]\n  'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba\n  with embedded Heimdal;(bso#14642).\n* Python ldb.msg_diff() memory handling failure;(bso#14836).\n* 'in' operator on ldb.Message is case sensitive;(bso#14845).\n* Fix Samba support for UF_NO_AUTH_DATA_REQUIRED;(bso#14871).\n* Allow special chars like '@' in samAccountName when generating\n  the salt;(bso#14874).\n* Fix transit path validation;(bso#12998).\n* Prepare to operate with MIT krb5 >= 1.20;(bso#14870).\n* rpcclient NetFileEnum and net rpc file both cause lock order\n  violation: brlock.tdb, share_entries.tdb;(bso#14645).\n* Python ldb.msg_diff() memory handling failure;(bso#14836).\n* Release LDB 2.3.1 for Samba 4.14.9;(bso#14848).\n\nSamba was updated to 4.13.12:\n\n* Address a signifcant performance regression in database access\n  in the AD DC since Samba 4.12;(bso#14806).\n* Fix performance regression in lsa_LookupSids3/LookupNames4\n  since Samba 4.9 by using an explicit database handle cache;\n  (bso#14807).\n* An unuthenticated user can crash the AD DC KDC by omitting the\n  server name in a TGS-REQ;(bso#14817).\n* Address flapping samba_tool_drs_showrepl test;(bso#14818).\n* Address flapping dsdb_schema_attributes test;(bso#14819).\n* An unuthenticated user can crash the AD DC KDC by omitting the\n  server name in a TGS-REQ;(bso#14817).\n* Fix CTDB flag/status update race conditions(bso#14784).\n\nSamba was updated to 4.13.11:\n\n* smbd: panic on force-close share during offload write; (bso#14769).\n* Fix returned attributes on fake quota file handle and avoid\n  hitting the VFS;(bso#14731).\n* smbd: 'deadtime' parameter doesn't work anymore;(bso#14783).\n* net conf list crashes when run as normal user;(bso#14787).\n* Work around special SMB2 READ response behavior of NetApp Ontap\n  7.3.7;(bso#14607).\n* Start the SMB encryption as soon as possible;(bso#14793).\n* Winbind should not start if the socket path for the privileged\n  pipe is too long;(bso#14792).\n\nldb was updated to 2.2.2:\n\n+ CVE-2020-25718: samba: An RODC can issue (forge) administrator tickets to other servers; (bsc#1192246); (bso#14558)\n+ CVE-2021-3738: samba: crash in dsdb stack; (bsc#1192215);(bso#14848)\n\nRelease ldb 2.2.2\n\n+ Corrected python behaviour for 'in' for LDAP attributes contained as part of ldb.Message;(bso#14845).\n+ Fix memory handling in ldb.msg_diff Corrected python docstrings;(bso#14836)\n+ Backport bronze bit fixes, tests, and selftest improvements; (bso#14881).","dates":{"published":"2021-11-10T16:34:26.000Z","modified":"2026-02-04T02:17:20.958Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"ldb&distro=SUSE Linux Enterprise Micro 5.1","name":"ldb","label":"ldb&distro=SUSE Linux Enterprise Micro 5.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ldb&distro=SUSE Linux Enterprise Micro 5.1","purlType":"rpm","versions":[{"text":"< 2.2.2-3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.2-3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ldb&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3","name":"ldb","label":"ldb&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ldb&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3","purlType":"rpm","versions":[{"text":"< 2.2.2-3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.2-3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"samba&distro=SUSE Linux Enterprise High Availability Extension 15 SP3","name":"samba","label":"samba&distro=SUSE Linux Enterprise High Availability Extension 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/samba&distro=SUSE Linux Enterprise High Availability Extension 15 SP3","purlType":"rpm","versions":[{"text":"< 4.13.13+git.528.140935f8d6a-3.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.13.13+git.528.140935f8d6a-3.12.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"samba","label":"Samba","category":"server-app"}},"hubHref":null},{"vendor":"suse","product":"samba&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3","name":"samba","label":"samba&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/samba&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3","purlType":"rpm","versions":[{"text":"< 4.13.13+git.528.140935f8d6a-3.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.13.13+git.528.140935f8d6a-3.12.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"samba","label":"Samba","category":"server-app"}},"hubHref":null},{"vendor":"suse","product":"samba&distro=SUSE Linux Enterprise Module for Python 2 15 SP3","name":"samba","label":"samba&distro=SUSE Linux Enterprise Module for Python 2 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/samba&distro=SUSE Linux Enterprise Module for Python 2 15 SP3","purlType":"rpm","versions":[{"text":"< 4.13.13+git.528.140935f8d6a-3.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.13.13+git.528.140935f8d6a-3.12.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"samba","label":"Samba","category":"server-app"}},"hubHref":null}],"affectedCount":5,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213647-1/","label":"www.suse.com/support/update/announcement/2021/suse-su-20213647-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1014440","label":"bugzilla.suse.com/1014440","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1192214","label":"bugzilla.suse.com/1192214","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1192215","label":"bugzilla.suse.com/1192215","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1192246","label":"bugzilla.suse.com/1192246","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1192247","label":"bugzilla.suse.com/1192247","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1192283","label":"bugzilla.suse.com/1192283","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1192284","label":"bugzilla.suse.com/1192284","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1192505","label":"bugzilla.suse.com/1192505","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2124","label":"www.suse.com/security/cve/CVE-2016-2124","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25717","label":"www.suse.com/security/cve/CVE-2020-25717","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25718","label":"www.suse.com/security/cve/CVE-2020-25718","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25719","label":"www.suse.com/security/cve/CVE-2020-25719","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25721","label":"www.suse.com/security/cve/CVE-2020-25721","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25722","label":"www.suse.com/security/cve/CVE-2020-25722","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23192","label":"www.suse.com/security/cve/CVE-2021-23192","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3738","label":"www.suse.com/security/cve/CVE-2021-3738","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2016-2124","CVE-2020-25717","CVE-2020-25718","CVE-2020-25719","CVE-2020-25721","CVE-2020-25722","CVE-2021-23192","CVE-2021-3738"],"downstream":[],"duplicates":[],"related":["CVE-2016-2124","CVE-2020-25717","CVE-2020-25718","CVE-2020-25719","CVE-2020-25721","CVE-2020-25722","CVE-2021-23192","CVE-2021-3738"]},"timeline":[{"kind":"published","date":"2021-11-10T16:34:26.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:17:20.958Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T14:09:25.264Z","stale":false,"partial":false}}