{"id":"MGASA-2021-0287","summary":"Updated samba and ldb packages fix security vulnerabilities","details":"A flaw was found in samba. Spaces used in a string around a domain name (DN),\nwhile supposed to be ignored, can cause invalid DN strings with spaces to\ninstead write a zero-byte into out-of-bounds memory, resulting in a crash.\nThe highest threat from this vulnerability is to system availability\n(CVE-2020-27840).\n\nA flaw was found in samba. The Samba smbd file server must map Windows group\nidentities (SIDs) into unix group ids (gids). The code that performs this had\na flaw that could allow it to read data beyond the end of the array in the\ncase where a negative cache entry had been added to the mapping cache. This\ncould cause the calling code to return those values into the process token\nthat stores the group membership for a user. The highest threat from this\nvulnerability is to data confidentiality and integrity (CVE-2021-20254).\n\nA flaw was found in Samba's libldb. Multiple, consecutive leading spaces in\nan LDAP attribute can lead to an out-of-bounds memory write, leading to a\ncrash of the LDAP server process handling the request. The highest threat\nfrom this vulnerability is to system availability (CVE-2021-20277).\n\nAlso, the samba package for Mageia 7 fixes a scriplet issue when updating.\n\nAdditionally, the sssd package has been rebuilt for the updated ldb package.\n","modified":"2026-01-30T12:23:56.637320Z","published":"2021-06-25T14:43:41Z","related":["CVE-2020-27840","CVE-2021-20254","CVE-2021-20277"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2021-0287.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=28686"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=28042"},{"type":"REPORT","url":"https://www.samba.org/samba/security/CVE-2020-27840.html"},{"type":"REPORT","url":"https://www.samba.org/samba/security/CVE-2021-20277.html"},{"type":"REPORT","url":"https://www.samba.org/samba/security/CVE-2021-20254.html"}],"affected":[{"package":{"name":"ldb","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/ldb?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.8-1.1.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0287.json"}},{"package":{"name":"samba","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/samba?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.18-1.3.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0287.json"}},{"package":{"name":"sssd","ecosystem":"Mageia:7","purl":"pkg:rpm/mageia/sssd?arch=source&distro=mageia-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-3.3.mga7"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0287.json"}},{"package":{"name":"ldb","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/ldb?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.5-1.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0287.json"}},{"package":{"name":"samba","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/samba?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.15-1.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0287.json"}},{"package":{"name":"sssd","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/sssd?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1.1.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2021-0287.json"}}],"schema_version":"1.7.3","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}