{
  "cveId": "CVE-2025-0620",
  "url": "https://patchblox.com/security/cve/CVE-2025-0620",
  "summary": "CVE-2025-0620 is fixed in 30 products on 1 platform, first by ctdb 2:4.21.4\u002Bdfsg-1ubuntu3.1, released June 3, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "samba: This update for samba fixes the following issues:\n\n- CVE-2025-0620: smbd doesn\u0027t pick up group membership changes whe...",
  "description": "This update for samba fixes the following issues:\n\n- CVE-2025-0620: smbd doesn\u0027t pick up group membership changes when re-authenticating an expired SMB session (bsc#1244136).\n\nOther bugfixes:\n\n- net ad join fails with \u0027Failed to join domain: failed to create kerberos keytab\u0027 (bsc#1238063).",
  "published": "2025-06-03T00:00:00Z",
  "severity": "Medium",
  "cvss": 4.9,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
  "epss": 0.00802,
  "epssPercentile": 0.56886,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "ctdb",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "ctdb 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-ctdb-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ldb-tools",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:2.10.0\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "ldb-tools 2:2.10.0\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-ldb-tools-2-2.10.0-samba4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libldb2",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:2.10.0\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "libldb2 2:2.10.0\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libldb2-2-2.10.0-samba4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libnss-winbind",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "libnss-winbind 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libnss-winbind-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpam-winbind",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "libpam-winbind 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libpam-winbind-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsmbclient0",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "libsmbclient0 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libsmbclient0-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libtalloc2",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:2.4.2\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "libtalloc2 2:2.4.2\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libtalloc2-2-2.4.2-samba4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libtdb1",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:1.4.12\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "libtdb1 2:1.4.12\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libtdb1-2-1.4.12-samba4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libtevent0t64",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:0.16.1\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "libtevent0t64 2:0.16.1\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libtevent0t64-2-0.16.1-samba4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libwbclient0",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "libwbclient0 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libwbclient0-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-ldb",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:2.10.0\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "python3-ldb 2:2.10.0\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-python3-ldb-2-2.10.0-samba4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-samba",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "python3-samba 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-python3-samba-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-talloc",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:2.4.2\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "python3-talloc 2:2.4.2\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-python3-talloc-2-2.4.2-samba4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-tdb",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:1.4.12\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "python3-tdb 2:1.4.12\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-python3-tdb-2-1.4.12-samba4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "registry-tools",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "registry-tools 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-registry-tools-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2:4.22.2\u002Bdfsg-1",
      "fix": "DEBIAN-CVE-2025-0620",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-0620",
      "released": "2025-06-06T14:15:21Z"
    },
    {
      "platform": "linux",
      "product": "samba",
      "release": "Debian 14",
      "fixedVersion": "2:4.22.2\u002Bdfsg-1",
      "fix": "DEBIAN-CVE-2025-0620",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-0620",
      "released": "2025-06-06T14:15:21Z"
    },
    {
      "platform": "linux",
      "product": "samba",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "samba 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-samba-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba",
      "release": "sles 15.7",
      "fixedVersion": "4.21.6\u002Bgit.402.80f493f530f-150700.3.3.1",
      "fix": "SUSE-SU-2025:02230-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02230-1",
      "released": "2025-07-04T16:03:18Z"
    },
    {
      "platform": "linux",
      "product": "samba-ad-dc",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "samba-ad-dc 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-samba-ad-dc-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-ad-provision",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "samba-ad-provision 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-samba-ad-provision-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-common",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "samba-common 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-samba-common-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-common-bin",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "samba-common-bin 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-samba-common-bin-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-dsdb-modules",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "samba-dsdb-modules 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-samba-dsdb-modules-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-libs",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "samba-libs 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-samba-libs-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-testsuite",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "samba-testsuite 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-samba-testsuite-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-vfs-ceph",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "samba-vfs-ceph 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-samba-vfs-ceph-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-vfs-glusterfs",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "samba-vfs-glusterfs 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-samba-vfs-glusterfs-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-vfs-modules",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "samba-vfs-modules 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-samba-vfs-modules-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-vfs-modules-extra",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "samba-vfs-modules-extra 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-samba-vfs-modules-extra-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "smbclient",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "smbclient 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-smbclient-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tdb-tools",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:1.4.12\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "tdb-tools 2:1.4.12\u002Bsamba4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-tdb-tools-2-1.4.12-samba4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "winbind",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "fix": "winbind 2:4.21.4\u002Bdfsg-1ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-winbind-2-4.21.4-dfsg-1ubuntu3.1",
      "released": "2025-06-03T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}