{"id":"CVE-2020-17049","aliases":["ALSA-2023:2570","ALSA-2024:0143","AZL-10661","AZL-36992","EUVD-2020-9005","GHSA-g2p3-j47p-8cwj","RHSA-2023:2570","RHSA-2024:0137","RHSA-2024:0139","RHSA-2024:0143","RHSA-2024:0252","RLSA-2024:0143","SUSE-SU-2022:0361-1","openSUSE-SU-2024:11631-1","openSUSE-SU-2024:13200-1","openSUSE-SU-2026:12011-1"],"status":"published","title":"Kerberos KDC Security Feature Bypass Vulnerability","description":"A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).\nTo exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it.\nThe update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.","severity":{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.13794,"percentile":0.96542,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-269","CWE-863"],"published":"2020-11-11T00:00:00Z","modified":"2026-10-29T11:30:57Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"krb5-devel","fixed_in":["1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"krb5-libs","fixed_in":["1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"krb5-pkinit","fixed_in":["1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"krb5-server","fixed_in":["1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"krb5-server-ldap","fixed_in":["1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"krb5-workstation","fixed_in":["1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libkadm5","fixed_in":["1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"samba","fixed_in":["4.18.3-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-devel","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-debuginfo","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-debugsource","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-libs","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-libs-debuginfo","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-pkinit","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-pkinit-debuginfo","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server-debuginfo","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server-ldap","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server-ldap-debuginfo","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-workstation","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-workstation-debuginfo","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libkadm5","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libkadm5-debuginfo","fixed_in":["0:1.20.1-8.el9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.6-4.module_el8.6.0+3339+9b5fdd22"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-3.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12-3.module_el8.9.0+3651+d05ea4c5"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-healthcheck-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12-3.module_el8.9.0+3651+d05ea4c5"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-1.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-1.module_el8.6.0+3031+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-3.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.12-11.module_el8.9.0+3715+e4197dc9.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1.1.module_el8.7.0+3349+cfeff52e"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-5.module_el8.9.0+3682+f63caf3e"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-9.1.module_el8.7.0+3349+cfeff52e"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-9.1.module_el8.7.0+3349+cfeff52e"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slapi-nis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.60.0-4.module_el8.9.0+3682+f63caf3e.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-5.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-5.module_el8.6.0+3031+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"softhsm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-5.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"softhsm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-5.module_el8.6.0+3031+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.12.5-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.3-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-pkinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-pkinit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-server-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"krb5-workstation-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libkadm5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libkadm5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.8.0+17351+9a3fb056"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind-dyndb-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.8.0+17351+9a3fb056"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind-dyndb-ldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.8.0+17351+9a3fb056"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-1.module+el8.8.0+17582+6bf5bf91"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-healthcheck-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-1.module+el8.8.0+17582+6bf5bf91"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.4.0+9007+5084bdd8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"opendnssec-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.4.0+9007+5084bdd8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"opendnssec-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.4.0+9007+5084bdd8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.1.module+el8.7.0+15842+306cbc83"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.2.0+4691+a05b2456"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.11-9.module+el8.8.0+20825+52dd1628"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.1.module+el8.7.0+15842+306cbc83"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.2.0+4691+a05b2456"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"slapi-nis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.8.0+20635+330e3683"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"slapi-nis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.8.0+20635+330e3683"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"slapi-nis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.8.0+20635+330e3683"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"softhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"softhsm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"softhsm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.6.0+16878+6c033536"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"bind-dyndb-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.6.0+16878+6c033536"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"bind-dyndb-ldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.6.0+16878+6c033536"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7-10.module+el8.6.0+14292+18b36d36"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-healthcheck-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7-10.module+el8.6.0+14292+18b36d36"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.4.0+9007+5084bdd8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"opendnssec-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.4.0+9007+5084bdd8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"opendnssec-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.4.0+9007+5084bdd8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.2.0+4691+a05b2456"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.8-11.module+el8.6.0+20984+095e5c46"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.2.0+4691+a05b2456"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"slapi-nis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-1.module+el8.6.0+16878+6c033536"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"slapi-nis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-1.module+el8.6.0+16878+6c033536"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"slapi-nis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-1.module+el8.6.0+16878+6c033536"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"softhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"softhsm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"softhsm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.4.0+10227+076cd560"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-dyndb-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-dyndb-ldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.6-4.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-3.module+el8.9.0+19634+c162f948"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-healthcheck-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-3.module+el8.9.0+19634+c162f948"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"opendnssec-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"opendnssec-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.1.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipatests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.12-11.module+el8.9.0+20824+f2605038"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.1.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slapi-nis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.9.0+20420+fef9eb45"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slapi-nis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.9.0+20420+fef9eb45"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slapi-nis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.9.0+20420+fef9eb45"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.9.0+18911+94941f82"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.9.0+1371+ffa84eb9"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-3.module+el8.9.0+1433+5bd2f890"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12-3.module+el8.9.0+1434+912e18bd"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.module+el8.9.0+1371+ffa84eb9"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.9.0+1371+ffa84eb9"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.10.0+1915+3c70f7d9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.9.0+1371+ffa84eb9"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.9.0+1372+09f67869"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.9.0+1372+09f67869"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.9.0+1372+09f67869"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slapi-nis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.60.0-4.module+el8.9.0+1573+39ab85f4"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.module+el8.9.0+1371+ffa84eb9"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-4.6.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.13+git.545.5897c2d94f3-3.12.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.2+git.193.a4d6307f1fd-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-impacket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.1-1.2"}]}],"bundled":2}],"products":[{"vendor":"microsoft","product":"windows server 2008  service pack 2"},{"vendor":"microsoft","product":"windows server 2008 r2 service pack 1"},{"vendor":"microsoft","product":"windows server 2008 r2 service pack 1 (server core installation)"},{"vendor":"microsoft","product":"windows server 2008 service pack 2"},{"vendor":"microsoft","product":"windows server 2008 service pack 2 (server core installation)"},{"vendor":"microsoft","product":"windows server 2012"},{"vendor":"microsoft","product":"windows server 2012 (server core installation)"},{"vendor":"microsoft","product":"windows server 2012 r2"},{"vendor":"microsoft","product":"windows server 2012 r2 (server core installation)"},{"vendor":"microsoft","product":"windows server 2016"},{"vendor":"microsoft","product":"windows server 2016 (server core installation)"},{"vendor":"microsoft","product":"windows server 2019"},{"vendor":"microsoft","product":"windows server 2019 (server core installation)"},{"vendor":"microsoft","product":"windows server version 2004"},{"vendor":"microsoft","product":"windows server version 20h2"},{"vendor":"microsoft","product":"windows server, version 1903 (server core installation)"},{"vendor":"microsoft","product":"windows server, version 1909 (server core installation)"},{"vendor":"microsoft","product":"windows_server_2012"},{"vendor":"microsoft","product":"windows_server_2016"},{"vendor":"microsoft","product":"windows_server_2019"},{"vendor":"samba","product":"samba"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17049","tags":["x_transferred","Patch","Vendor Advisory","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2021/11/10/3","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202309-06","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-17049","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-g2p3-j47p-8cwj"},{"url":"https://access.redhat.com/errata/RHSA-2023:2570","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-17049","tags":["report"]},{"url":"https://bugzilla.redhat.com/2025721","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2570.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5455","tags":["report"]},{"url":"https://bugzilla.redhat.com/2242828","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-0143.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2068535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151513","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169985","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2570.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-17049","tags":["advisory"]},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17049","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0137","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242828","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0137.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5455","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5455","tags":["advisory"]},{"url":"https://www.freeipa.org/release-notes/4-10-3.html","tags":["article"]},{"url":"https://www.freeipa.org/release-notes/4-11-1.html","tags":["article"]},{"url":"https://www.freeipa.org/release-notes/4-6-10.html","tags":["article"]},{"url":"https://www.freeipa.org/release-notes/4-9-14.html","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0139","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-17120","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0139.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0143.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0252","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-17108","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0252.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:0143","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220361-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1014440","tags":["report"]},{"url":"https://bugzilla.suse.com/1188727","tags":["report"]},{"url":"https://bugzilla.suse.com/1189017","tags":["report"]},{"url":"https://bugzilla.suse.com/1189875","tags":["report"]},{"url":"https://bugzilla.suse.com/1192214","tags":["report"]},{"url":"https://bugzilla.suse.com/1192215","tags":["report"]},{"url":"https://bugzilla.suse.com/1192246","tags":["report"]},{"url":"https://bugzilla.suse.com/1192247","tags":["report"]},{"url":"https://bugzilla.suse.com/1192283","tags":["report"]},{"url":"https://bugzilla.suse.com/1192284","tags":["report"]},{"url":"https://bugzilla.suse.com/1192505","tags":["report"]},{"url":"https://bugzilla.suse.com/1192849","tags":["report"]},{"url":"https://bugzilla.suse.com/1194859","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44142","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31800","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-17049","title":"Kerberos KDC Security Feature Bypass Vulnerability","description":"A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).\nTo exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it.\nThe update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.","status":"published","published":"2020-11-11T00:00:00Z","modified":"2024-11-15T16:12:52.309Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:54.80237Z"}],"euvd":[{"id":"EUVD-2020-9005","description":"A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).\nTo exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it.\nThe update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.","status":"published","published":"2020-11-11T00:00:00Z","modified":"2024-11-15T16:12:52Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"medium"}],"updated_at":"2026-11-03T00:04:59.542658Z"}],"ghsa":[{"id":"GHSA-g2p3-j47p-8cwj","title":"Kerberos Security Feature Bypass Vulnerability","description":"Kerberos Security Feature Bypass Vulnerability","status":"published","published":"2022-05-24T17:33:47Z","modified":"2023-09-17T09:30:17Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269","CWE-863"],"updated_at":"2026-11-02T14:54:46.481792Z"}],"nvd":[{"id":"CVE-2020-17049","description":"A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).\nTo exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it.\nThe update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.","status":"published","published":"2020-11-11T07:15:16.543Z","modified":"2026-06-17T02:58:34.727Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:06:24.137599Z"}],"osv":[{"id":"AZL-10661","title":"CVE-2020-17049 affecting package samba 4.12.5-7","description":"A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).\nTo exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it.\nThe update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.","status":"published","published":"2020-11-11T07:15:16Z","modified":"2026-04-21T04:21:19.76663Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:01.408755Z"},{"id":"AZL-36992","title":"CVE-2020-17049 affecting package samba for versions less than 4.18.3-1","description":"A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).\nTo exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it.\nThe update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.","status":"published","published":"2020-11-11T07:15:16Z","modified":"2026-04-21T04:33:00.105162Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"CVE-2020-17049","description":"A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).\nTo exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it.\nThe update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.","status":"published","published":"2020-11-11T07:15:16.543Z","modified":"2026-10-24T10:30:23.80087831Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:14.828228Z"},{"id":"RHSA-2023:2570","title":"Red Hat Security Advisory: krb5 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T10:34:26Z","modified":"2026-08-05T10:14:32Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2024:0137","title":"Red Hat Security Advisory: idm:DL1 security update","status":"published","published":"2024-09-16T16:08:57Z","modified":"2026-08-05T10:16:58Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0139","title":"Red Hat Security Advisory: idm:DL1 security update","status":"published","published":"2024-09-16T16:08:17Z","modified":"2026-08-05T10:16:58Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0143","title":"Red Hat Security Advisory: idm:DL1 security update","status":"published","published":"2024-09-16T16:08:06Z","modified":"2026-08-05T10:16:59Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0252","title":"Red Hat Security Advisory: krb5 security update","status":"withdrawn","published":"2024-09-16T16:09:07Z","modified":"2026-03-18T12:00:19.50729Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RLSA-2024:0143","title":"Moderate: idm:DL1 security update","description":"Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. \n\nSecurity Fix(es):\n\n* Kerberos: delegation constrain bypass in S4U2Proxy (CVE-2020-17049)\n\n* ipa: Invalid CSRF protection (CVE-2023-5455)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-01-12T19:57:42.284423Z","modified":"2025-10-09T05:47:12.549455Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"ALSA-2023:2570","title":"Moderate: krb5 security, bug fix, and enhancement update","description":"Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).\n\nThe following packages have been upgraded to a later upstream version: krb5 (1.20.1). (BZ#2016312)\n\nSecurity Fix(es):\n\n* Kerberos: delegation constrain bypass in S4U2Proxy (CVE-2020-17049)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:57.617121894Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2024:0143","title":"Moderate: idm:DL1 security update","description":"AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. \n\nSecurity Fix(es):\n\n* Kerberos: delegation constrain bypass in S4U2Proxy (CVE-2020-17049)\n* ipa: Invalid CSRF protection (CVE-2023-5455)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-01-10T00:00:00Z","modified":"2026-10-29T11:02:20.321233455Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"openSUSE-SU-2024:11631-1","title":"ctdb-4.15.2+git.193.a4d6307f1fd-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.15.2+git.193.a4d6307f1fd-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:22:51.173439Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:13200-1","title":"python310-impacket-0.11.0-2.1 on GA media","description":"These are all security issues fixed in the python310-impacket-0.11.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:41:29.439867Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2026:12011-1","title":"python313-impacket-0.13.1-1.2 on GA media","description":"These are all security issues fixed in the python313-impacket-0.13.1-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-04T00:00:00Z","modified":"2026-10-05T10:15:46.425947226Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"SUSE-SU-2022:0361-1","title":"Security update for ldb, samba","description":"This update for ldb, samba fixes the following issues:\n\nChanges in ldb:\n\n+ CVE-2020-25718: An RODC can issue (forge) administrator\n  tickets to other servers; (bsc#1192246)\n+ CVE-2021-3738: Fixed a crash in dsdb stack (bsc#1192215)\n\nRelease ldb 2.2.2\n\n+ Corrected python behaviour for 'in' for LDAP attributes\n  contained as part of ldb.Message\n+ Fix memory handling in ldb.msg_diff\n+ Backport bronze bit fixes, tests, and selftest improvements.\n\nChanges in samba:\n\n- CVE-2021-44142: Fixed an Out-of-Bound Read/Write on Samba vfs_fruit\n  module; (bsc#1194859)\n\n- The username map [script] advice from CVE-2020-25717 advisory\n  note has undesired side effects for the local nt token. Fallback\n  to a SID/UID based mapping if the name based lookup fails;\n  (bsc#1192849); (bso#14901).\n\n- Fix regression introduced by CVE-2020-25717 patches, winbindd\n  does not start when 'allow trusted domains' is off; (bso#14899);\n\n- CVE-2020-25717: Fixed that a user on the domain can become root on\n  domain members; (bsc#1192284); (bso#14556).\n- CVE-2020-25721: auth: Fill in the new HAS_SAM_NAME_AND_SID\n  values; (bsc#1192505); (bso#14564).\n- CVE-2020-25718: An RODC can issue (forge) administrator tickets\n  to other servers; (bsc#1192246);(bso#14558).\n- CVE-2020-25719: Fixed AD DC Username based races when no PAC\n  is given;(bsc#1192247);(bso#14561).\n- CVE-2020-25722: Fixed that AD DC UPN vs samAccountName not checked\n  (top-level bug for AD DC validation issues);(bsc#1192283);\n  (bso#14564).\n- CVE-2021-3738: Fixed a crash in dsdb stack;(bsc#1192215);\n  (bso#14468).\n- CVE-2021-23192: Fixed that dcerpc requests don't check all fragments\n  against the first auth_state;(bsc#1192214);(bso#14875).\n\n- CVE-2016-2124: don't fallback to non spnego authentication if we\n  require kerberos; (bsc#1014440); (bso#12444).\n\nUpdate to 4.13.13\n\n   * rodc_rwdc test flaps;(bso#14868).\n   * Backport bronze bit fixes, tests, and selftest improvements;\n     (bso#14881).\n   * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY]\n     'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba\n     with embedded Heimdal;(bso#14642).\n   * Python ldb.msg_diff() memory handling failure;(bso#14836).\n   * 'in' operator on ldb.Message is case sensitive;(bso#14845).\n   * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED;(bso#14871).\n   * Allow special chars like '@' in samAccountName when generating\n     the salt;(bso#14874).\n   * Fix transit path validation;(bso#12998).\n   * Prepare to operate with MIT krb5 \u003e= 1.20;(bso#14870).\n   * rpcclient NetFileEnum and net rpc file both cause lock order\n     violation: brlock.tdb, share_entries.tdb;(bso#14645).\n   * Python ldb.msg_diff() memory handling failure;(bso#14836).\n   * Release LDB 2.3.1 for Samba 4.14.9;(bso#14848).\n\n- Update to 4.13.12\n\n   * Address a signifcant performance regression in database access\n     in the AD DC since Samba 4.12;(bso#14806).\n   * Fix performance regression in lsa_LookupSids3/LookupNames4\n     since Samba 4.9 by using an explicit database handle cache;\n     (bso#14807).\n   * An unuthenticated user can crash the AD DC KDC by omitting the\n     server name in a TGS-REQ;(bso#14817).\n   * Address flapping samba_tool_drs_showrepl test;(bso#14818).\n   * Address flapping dsdb_schema_attributes test;(bso#14819).\n   * An unuthenticated user can crash the AD DC KDC by omitting the\n     server name in a TGS-REQ;(bso#14817).\n   * Fix CTDB flag/status update race conditions(bso#14784).\n\n- Update to 4.13.11\n\n   * smbd: panic on force-close share during offload write;\n     (bso#14769).\n   * Fix returned attributes on fake quota file handle and avoid\n     hitting the VFS;(bso#14731).\n   * smbd: 'deadtime' parameter doesn't work anymore;(bso#14783).\n   * net conf list crashes when run as normal user;(bso#14787).\n   * Work around special SMB2 READ response behavior of NetApp Ontap\n     7.3.7;(bso#14607).\n   * Start the SMB encryption as soon as possible;(bso#14793).\n   * Winbind should not start if the socket path for the privileged\n     pipe is too long;(bso#14792).\n\n- Fix 'net rpc' authentication when using the machine account;\n  (bsc#1189017); (bso#14796);\n\n- Fix dependency problem upgrading from libndr0 to libndr1;\n  (bsc#1189875);\n- Fix dependency problem upgrading from libsmbldap0 to libsmbldap2;\n  (bsc#1189875);\n- Fix wrong kvno exported to keytab after net ads changetrustpw due\n  to replication delay; (bsc#1188727);\n- Add Certificate Auto Enrollment Policy; (jsc#SLE-18456).\n\n- Update to 4.13.10\n\n  * s3: smbd: Ensure POSIX default ACL is mapped into returned\n    Windows ACL for directory handles; (bso#14708);\n  * Take a copy to make sure we don't reference free'd memory; (bso#14721);\n  * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722);\n  * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in\n    change_file_owner_to_parent() error path; (bso#14736);\n  * samba-tool: Give better error information when the\n    'domain backup restore' fails with a duplicate SID; (bso#14575);\n  * smbd: Correctly initialize close timestamp fields; (bso#14714);\n  * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740);\n  * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475);\n  * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750);\n  * smbXsrv_{open,session,tcon}: Protect\n    smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752);\n  * samba-tool domain backup offline doesn't work against bind DLZ\n    backend; (bso#14027);\n  * netcmd: Use next_free_rid() function to calculate a SID for\n    restoring a backup; (bso#14669);\n\n- Update to 4.13.9\n\n  * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696);\n  * Add documentation for dsdb_group_audit and dsdb_group_json_audit\n    to 'log level', synchronise 'log level' in smb.conf with the code; (bso#14689);\n  * Fix smbd panic when two clients open same file; (bso#14672);\n  * Fix memory leak in the RPC server; (bso#14675);\n  * s3: smbd: Fix deferred renames; (bso#14679);\n  * s3-iremotewinspool: Set the per-request memory context; (bso#14675);\n  * rpc_server3: Fix a memleak for internal pipes; (bso#14675);\n  * third_party: Update socket_wrapper to version 1.3.2; (bso#11899);\n  * third_party: Update socket_wrapper to version 1.3.3; (bso#14639);\n  * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid\n    conflict; (bso#14663);\n  * Fix the build on OmniOS; (bso#14288);\n\n- Update to 4.13.8\n\n  * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571\n\n- Update to 4.13.7\n\n  * Release with dependency on ldb version 2.2.1.\n","status":"published","published":"2022-02-10T14:12:34Z","modified":"2026-02-04T02:13:04.762341Z","updated_at":"2026-11-02T15:53:50.066806Z"}]}}