File _patchinfo of Package patchinfo.19341
<patchinfo incident="19341">
<issue tracker="cve" id="2021-20254"/>
<issue tracker="cve" id="2020-27840"/>
<issue tracker="cve" id="2021-20277"/>
<issue tracker="bnc" id="1183572">VUL-0: CVE-2020-27840: ldb: Unauthenticated remote heap corruption via bad DNs</issue>
<issue tracker="bnc" id="1183574">VUL-0: CVE-2021-20277: ldb: out of bounds read in ldb_handler_fold</issue>
<issue tracker="bnc" id="1182830">samba.spec fixes around systemd and requires</issue>
<issue tracker="bnc" id="1184677">VUL-0: EMBARGOED: CVE-2021-20254: samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token</issue>
<issue tracker="bnc" id="1189875"></issue>
<packager>npower</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for samba</summary>
<description>This update for samba fixes the following issues:
- CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574).
- CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677).
- CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572).
- Spec file fixes around systemd and requires (bsc#1182830)
- Fix dependency problem upgrading from libndr0 to libndr1 (bsc#1189875)
- Fix dependency problem upgrading from libsmbldap0 to libsmbldap2 (bsc#1189875)
</description>
</patchinfo>