Date: Sat, 1 May 2021 01:31:19 GMT From: "Timur I. Bakeyev" <timur@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 265e9a670c90 - main - Add an entry about Samba vulnerability CVE-2021-20254: Message-ID: <202105010131.1411VJem026684@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by timur: URL: https://cgit.FreeBSD.org/ports/commit/?id=265e9a670c90ee806226bdf152df954d5f5b5898 commit 265e9a670c90ee806226bdf152df954d5f5b5898 Author: Timur I. Bakeyev <timur@FreeBSD.org> AuthorDate: 2021-05-01 01:19:48 +0000 Commit: Timur I. Bakeyev <timur@FreeBSD.org> CommitDate: 2021-05-01 01:25:40 +0000 Add an entry about Samba vulnerability CVE-2021-20254: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token. PR: Submitted by: Reported by: Reviewed by: Approved by: Obtained from: MFC after: MFH: Relnotes: Security: CVE-2021-20254 Sponsored by: Differential Revision: --- security/vuxml/vuln.xml | 37 +++++++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index a8705a3642ef..0bb03adc9e14 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -76,6 +76,43 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="6f33d38b-aa18-11eb-b3f1-005056a311d1"> + <topic>samba -- negative idmap cache entries vulnerability</topic> + <affects> + <package> + <name>samba412</name> + <range><lt>4.12.15</lt></range> + </package> + <package> + <name>samba413</name> + <range><lt>4.13.8</lt></range> + </package> + <package> + <name>samba414</name> + <range><lt>4.14.4</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The Samba Team reports:</p> + <blockquote cite="https://www.samba.org/samba/history/security.html"> + <ul> + <li>CVE-2021-20254: Negative idmap cache entries can cause incorrect + group entries in the Samba file server process token.</li> + </ul> + </blockquote> + </body> + </description> + <references> + <url>https://www.samba.org/samba/security/CVE-2021-20254.html</url> + <cvename>CVE-2021-20254</cvename> + </references> + <dates> + <discovery>2021-04-29</discovery> + <entry>2021-05-01</entry> + </dates> + </vuln> + <vuln vid="518a119c-a864-11eb-8ddb-001b217b3468"> <topic>Gitlab -- Vulnerabilities</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202105010131.1411VJem026684>