diff options
| author | Timur I. Bakeyev <timur@FreeBSD.org> | 2021-05-01 09:19:48 +0800 |
|---|---|---|
| committer | Timur I. Bakeyev <timur@FreeBSD.org> | 2021-05-01 09:25:40 +0800 |
| commit | 265e9a670c90ee806226bdf152df954d5f5b5898 (patch) | |
| tree | 3e055f7b594af9528fdc864957ab2dbdedf85226 /security/vuxml | |
| parent | ab8644377d813ab0a5bd3f36da0f556e6e4e008e (diff) | |
| download | freebsd-ports-gnome-265e9a670c90ee806226bdf152df954d5f5b5898.tar.gz freebsd-ports-gnome-265e9a670c90ee806226bdf152df954d5f5b5898.tar.zst freebsd-ports-gnome-265e9a670c90ee806226bdf152df954d5f5b5898.zip | |
Add an entry about Samba vulnerability CVE-2021-20254:
Negative idmap cache entries can cause incorrect group entries in the Samba file server process token.
PR:
Submitted by:
Reported by:
Reviewed by:
Approved by:
Obtained from:
MFC after:
MFH:
Relnotes:
Security: CVE-2021-20254
Sponsored by:
Differential Revision:
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index a8705a3642ef..0bb03adc9e14 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -76,6 +76,43 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="6f33d38b-aa18-11eb-b3f1-005056a311d1"> + <topic>samba -- negative idmap cache entries vulnerability</topic> + <affects> + <package> + <name>samba412</name> + <range><lt>4.12.15</lt></range> + </package> + <package> + <name>samba413</name> + <range><lt>4.13.8</lt></range> + </package> + <package> + <name>samba414</name> + <range><lt>4.14.4</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The Samba Team reports:</p> + <blockquote cite="https://www.samba.org/samba/history/security.html"> + <ul> + <li>CVE-2021-20254: Negative idmap cache entries can cause incorrect + group entries in the Samba file server process token.</li> + </ul> + </blockquote> + </body> + </description> + <references> + <url>https://www.samba.org/samba/security/CVE-2021-20254.html</url> + <cvename>CVE-2021-20254</cvename> + </references> + <dates> + <discovery>2021-04-29</discovery> + <entry>2021-05-01</entry> + </dates> + </vuln> + <vuln vid="518a119c-a864-11eb-8ddb-001b217b3468"> <topic>Gitlab -- Vulnerabilities</topic> <affects> |