{"affected":[{"ecosystem_specific":{"binaries":[{"ctdb":"4.10.18+git.339.c912385a5e1-3.41.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP5","name":"samba","purl":"pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.18+git.339.c912385a5e1-3.41.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libndr-devel":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-krb5pac-devel":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-nbt-devel":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-standard-devel":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-util-devel":"4.10.18+git.339.c912385a5e1-3.41.1","libsmbclient-devel":"4.10.18+git.339.c912385a5e1-3.41.1","libwbclient-devel":"4.10.18+git.339.c912385a5e1-3.41.1","samba-core-devel":"4.10.18+git.339.c912385a5e1-3.41.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","name":"samba","purl":"pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.18+git.339.c912385a5e1-3.41.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libdcerpc-binding0":"4.10.18+git.339.c912385a5e1-3.41.1","libdcerpc-binding0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libdcerpc0":"4.10.18+git.339.c912385a5e1-3.41.1","libdcerpc0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-krb5pac0":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-krb5pac0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-nbt0":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-nbt0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-standard0":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-standard0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libndr0":"4.10.18+git.339.c912385a5e1-3.41.1","libndr0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libnetapi0":"4.10.18+git.339.c912385a5e1-3.41.1","libnetapi0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-credentials0":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-credentials0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-errors0":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-errors0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-hostconfig0":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-hostconfig0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-passdb0":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-passdb0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-util0":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-util0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsamdb0":"4.10.18+git.339.c912385a5e1-3.41.1","libsamdb0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsmbclient0":"4.10.18+git.339.c912385a5e1-3.41.1","libsmbclient0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsmbconf0":"4.10.18+git.339.c912385a5e1-3.41.1","libsmbconf0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsmbldap2":"4.10.18+git.339.c912385a5e1-3.41.1","libsmbldap2-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libtevent-util0":"4.10.18+git.339.c912385a5e1-3.41.1","libtevent-util0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libwbclient0":"4.10.18+git.339.c912385a5e1-3.41.1","libwbclient0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","samba":"4.10.18+git.339.c912385a5e1-3.41.1","samba-client":"4.10.18+git.339.c912385a5e1-3.41.1","samba-client-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","samba-doc":"4.10.18+git.339.c912385a5e1-3.41.1","samba-libs":"4.10.18+git.339.c912385a5e1-3.41.1","samba-libs-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","samba-libs-python3":"4.10.18+git.339.c912385a5e1-3.41.1","samba-libs-python3-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","samba-winbind":"4.10.18+git.339.c912385a5e1-3.41.1","samba-winbind-32bit":"4.10.18+git.339.c912385a5e1-3.41.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","name":"samba","purl":"pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.18+git.339.c912385a5e1-3.41.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libdcerpc-binding0":"4.10.18+git.339.c912385a5e1-3.41.1","libdcerpc-binding0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libdcerpc0":"4.10.18+git.339.c912385a5e1-3.41.1","libdcerpc0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-krb5pac0":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-krb5pac0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-nbt0":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-nbt0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-standard0":"4.10.18+git.339.c912385a5e1-3.41.1","libndr-standard0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libndr0":"4.10.18+git.339.c912385a5e1-3.41.1","libndr0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libnetapi0":"4.10.18+git.339.c912385a5e1-3.41.1","libnetapi0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-credentials0":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-credentials0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-errors0":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-errors0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-hostconfig0":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-hostconfig0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-passdb0":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-passdb0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-util0":"4.10.18+git.339.c912385a5e1-3.41.1","libsamba-util0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsamdb0":"4.10.18+git.339.c912385a5e1-3.41.1","libsamdb0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsmbclient0":"4.10.18+git.339.c912385a5e1-3.41.1","libsmbclient0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsmbconf0":"4.10.18+git.339.c912385a5e1-3.41.1","libsmbconf0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libsmbldap2":"4.10.18+git.339.c912385a5e1-3.41.1","libsmbldap2-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libtevent-util0":"4.10.18+git.339.c912385a5e1-3.41.1","libtevent-util0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","libwbclient0":"4.10.18+git.339.c912385a5e1-3.41.1","libwbclient0-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","samba":"4.10.18+git.339.c912385a5e1-3.41.1","samba-client":"4.10.18+git.339.c912385a5e1-3.41.1","samba-client-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","samba-doc":"4.10.18+git.339.c912385a5e1-3.41.1","samba-libs":"4.10.18+git.339.c912385a5e1-3.41.1","samba-libs-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","samba-libs-python3":"4.10.18+git.339.c912385a5e1-3.41.1","samba-libs-python3-32bit":"4.10.18+git.339.c912385a5e1-3.41.1","samba-winbind":"4.10.18+git.339.c912385a5e1-3.41.1","samba-winbind-32bit":"4.10.18+git.339.c912385a5e1-3.41.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","name":"samba","purl":"pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.10.18+git.339.c912385a5e1-3.41.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for samba fixes the following issues:\n\n- CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440).\n- CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284).\n- CVE-2021-23192: Fixed dcerpc requests to don't check all fragments against the first auth_state (bsc#1192214).\n","id":"SUSE-SU-2021:3649-1","modified":"2021-11-10T16:35:26Z","published":"2021-11-10T16:35:26Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213649-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1014440"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192214"},{"type":"REPORT","url":"https://bugzilla.suse.com/1192284"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-2124"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-25717"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-23192"}],"related":["CVE-2016-2124","CVE-2020-25717","CVE-2021-23192"],"summary":"Security update for samba","upstream":["CVE-2016-2124","CVE-2020-25717","CVE-2021-23192"]}