https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T12:08:23.590241+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-20254 CVE-2021-20254 2026-10-03T12:08:24.603326+00:00

Affected: samba

A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.

 https://vulnerability.circl.lu/vuln/usn-4930-1 USN-4930-1 — samba vulnerability 2026-10-03T12:08:24.603563+00:00

Affected: Ubuntu:16.04:LTS: samba, Ubuntu:18.04:LTS: samba, Ubuntu:20.04:LTS: samba

Peter Eriksson discovered that Samba incorrectly handled certain negative idmap cache entries. This issue could result in certain users gaining unauthorized access to files, contrary to expected behaviour.