It was discovered that Samba incorrectly handled certain group membership changes when using Kerberos authentication. A remote user could possibly use this issue to continue to access resources after being removed by an administrator.
{ "binaries": [ { "binary_name": "ctdb", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "ctdb-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "ldb-tools", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "ldb-tools-dbgsym", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libldb-dev", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libldb2", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libldb2-dbgsym", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libnss-winbind", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libnss-winbind-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libpam-winbind", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libpam-winbind-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libsmbclient-dev", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libsmbclient0", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libsmbclient0-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libtalloc-dev", "binary_version": "2:2.4.2+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libtalloc2", "binary_version": "2:2.4.2+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libtalloc2-dbgsym", "binary_version": "2:2.4.2+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libtdb-dev", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libtdb1", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libtdb1-dbgsym", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libtevent-dev", "binary_version": "2:0.16.1+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libtevent0t64", "binary_version": "2:0.16.1+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libtevent0t64-dbgsym", "binary_version": "2:0.16.1+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libwbclient-dev", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libwbclient0", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "libwbclient0-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "python3-ldb", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "python3-ldb-dbgsym", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "python3-samba", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "python3-samba-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "python3-talloc", "binary_version": "2:2.4.2+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "python3-talloc-dbgsym", "binary_version": "2:2.4.2+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "python3-tdb", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "python3-tdb-dbgsym", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "registry-tools", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "registry-tools-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-ad-dc", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-ad-dc-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-ad-provision", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-common", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-common-bin", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-common-bin-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-dev", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-dsdb-modules", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-dsdb-modules-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-libs", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-libs-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-testsuite", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-testsuite-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-vfs-ceph", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-vfs-ceph-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-vfs-glusterfs", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-vfs-glusterfs-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-vfs-modules", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "samba-vfs-modules-extra", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "smbclient", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "smbclient-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "tdb-tools", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "tdb-tools-dbgsym", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "winbind", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" }, { "binary_name": "winbind-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3.1" } ], "availability": "No subscription required" }