FlawAtlas
Search the atlas
SUSE-SU-2021:1498-1 Not scored

Security update for samba

This update for samba fixes the following issues: - CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574). - CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677). - CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572). - Avoid free'ing our own pointer in memcache when memcache_trim attempts to reduce cache size (bsc#1179156). - s3-libads: use dns name to open a ldap session (bsc#1184310). - Adjust smbcacls '--propagate-inheritance' feature to align with upstream (bsc#1178469).

Exploit probability Not scored
Published May 4, 2021
Required by Not available
Last source change May 2, 2025

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 6 samba
SUSE:Linux Enterprise High Availability Extension 15 SP1 samba
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS samba
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS samba
SUSE:Linux Enterprise Server 15 SP1-BCL samba
SUSE:Linux Enterprise Server 15 SP1-LTSS samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 samba
SUSE:Manager Proxy 4.0 samba
SUSE:Manager Retail Branch Server 4.0 samba
SUSE:Manager Server 4.0 samba

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2021:1498-1

This update for samba fixes the following issues: - CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574). - CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677). - CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572). - Avoid free'ing our own pointer in memcache when memcache_trim attempts to reduce cache size (bsc#1179156). - s3-libads: use dns name to open a ldap session (bsc#1184310). - Adjust smbcacls '--propagate-inheritance' feature to align with upstream (bsc#1178469).

View original source

05 / REFERENCES

Further evidence