Security update for samba SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:0185-1 Final 1 1 2021-01-21T10:36:13Z current 2021-01-21T10:36:13Z 2021-01-21T10:36:13Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for samba This update for samba fixes the following issues: - Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp->aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden 'magic' everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514); - Update to 4.13.2 + s3: modules: vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement 'List Object' mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); - Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469). - Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use /run/samba instead of /var/run/samba; (bsc#1177355); The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2021-185,SUSE-Storage-7-2021-185 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20210185-1/ Link for SUSE-SU-2021:0185-1 https://lists.suse.com/pipermail/sle-security-updates/2021-January/008231.html E-Mail link for SUSE-SU-2021:0185-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1173902 SUSE Bug 1173902 https://bugzilla.suse.com/1173994 SUSE Bug 1173994 https://bugzilla.suse.com/1177355 SUSE Bug 1177355 https://bugzilla.suse.com/1177613 SUSE Bug 1177613 https://bugzilla.suse.com/1178469 SUSE Bug 1178469 https://www.suse.com/security/cve/CVE-2020-14318/ SUSE CVE CVE-2020-14318 page https://www.suse.com/security/cve/CVE-2020-14323/ SUSE CVE CVE-2020-14323 page https://www.suse.com/security/cve/CVE-2020-14383/ SUSE CVE CVE-2020-14383 page SUSE Enterprise Storage 7 ctdb-4.13.3+git.181.fc4672a5b81-3.3.1 ctdb-pcp-pmda-4.13.3+git.181.fc4672a5b81-3.3.1 ctdb-tests-4.13.3+git.181.fc4672a5b81-3.3.1 libdcerpc-binding0-4.13.3+git.181.fc4672a5b81-3.3.1 libdcerpc-binding0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libdcerpc-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libdcerpc-samr-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libdcerpc-samr0-4.13.3+git.181.fc4672a5b81-3.3.1 libdcerpc-samr0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libdcerpc0-4.13.3+git.181.fc4672a5b81-3.3.1 libdcerpc0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-krb5pac-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-krb5pac0-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-krb5pac0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-nbt-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-nbt0-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-nbt0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-standard-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-standard0-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-standard0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libndr1-4.13.3+git.181.fc4672a5b81-3.3.1 libndr1-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libnetapi-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libnetapi-devel-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libnetapi0-4.13.3+git.181.fc4672a5b81-3.3.1 libnetapi0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-credentials-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-credentials0-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-credentials0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-errors-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-errors0-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-errors0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-hostconfig-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-hostconfig0-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-hostconfig0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-passdb-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-passdb0-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-passdb0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-policy-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-policy-python3-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-policy0-python3-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-policy0-python3-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-util-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-util0-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-util0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libsamdb-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libsamdb0-4.13.3+git.181.fc4672a5b81-3.3.1 libsamdb0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbclient-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbclient0-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbclient0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbconf-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbconf0-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbconf0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbldap-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbldap2-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbldap2-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libtevent-util-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libtevent-util0-4.13.3+git.181.fc4672a5b81-3.3.1 libtevent-util0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 libwbclient-devel-4.13.3+git.181.fc4672a5b81-3.3.1 libwbclient0-4.13.3+git.181.fc4672a5b81-3.3.1 libwbclient0-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 samba-4.13.3+git.181.fc4672a5b81-3.3.1 samba-ad-dc-4.13.3+git.181.fc4672a5b81-3.3.1 samba-ad-dc-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 samba-ceph-4.13.3+git.181.fc4672a5b81-3.3.1 samba-client-4.13.3+git.181.fc4672a5b81-3.3.1 samba-client-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 samba-core-devel-4.13.3+git.181.fc4672a5b81-3.3.1 samba-doc-4.13.3+git.181.fc4672a5b81-3.3.1 samba-dsdb-modules-4.13.3+git.181.fc4672a5b81-3.3.1 samba-libs-4.13.3+git.181.fc4672a5b81-3.3.1 samba-libs-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 samba-libs-python3-4.13.3+git.181.fc4672a5b81-3.3.1 samba-libs-python3-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 samba-python3-4.13.3+git.181.fc4672a5b81-3.3.1 samba-test-4.13.3+git.181.fc4672a5b81-3.3.1 samba-winbind-4.13.3+git.181.fc4672a5b81-3.3.1 samba-winbind-64bit-4.13.3+git.181.fc4672a5b81-3.3.1 ctdb-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libdcerpc-binding0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libdcerpc0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libndr-krb5pac0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libndr-nbt0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libndr-standard0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libndr1-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libnetapi0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libsamba-credentials0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libsamba-errors0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libsamba-hostconfig0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libsamba-passdb0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libsamba-util0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libsamdb0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libsmbclient0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libsmbconf0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libsmbldap2-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libtevent-util0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 libwbclient0-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 samba-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 samba-ceph-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 samba-client-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 samba-libs-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 samba-libs-python3-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 samba-winbind-4.13.3+git.181.fc4672a5b81-3.3.1 as a component of SUSE Enterprise Storage 7 A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker. CVE-2020-14318 SUSE Enterprise Storage 7:ctdb-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libdcerpc0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libndr-nbt0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libndr-standard0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libndr1-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libnetapi0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-credentials0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-errors0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-passdb0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-util0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamdb0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsmbclient0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsmbconf0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsmbldap2-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libtevent-util0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libwbclient0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-ceph-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-client-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-libs-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-libs-python3-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-winbind-4.13.3+git.181.fc4672a5b81-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210185-1/ https://www.suse.com/security/cve/CVE-2020-14318.html CVE-2020-14318 https://bugzilla.suse.com/1173902 SUSE Bug 1173902 A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service. CVE-2020-14323 SUSE Enterprise Storage 7:ctdb-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libdcerpc0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libndr-nbt0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libndr-standard0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libndr1-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libnetapi0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-credentials0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-errors0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-passdb0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-util0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamdb0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsmbclient0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsmbconf0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsmbldap2-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libtevent-util0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libwbclient0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-ceph-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-client-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-libs-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-libs-python3-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-winbind-4.13.3+git.181.fc4672a5b81-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210185-1/ https://www.suse.com/security/cve/CVE-2020-14323.html CVE-2020-14323 https://bugzilla.suse.com/1173994 SUSE Bug 1173994 A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate, but many RPC services will not. CVE-2020-14383 SUSE Enterprise Storage 7:ctdb-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libdcerpc0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libndr-nbt0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libndr-standard0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libndr1-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libnetapi0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-credentials0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-errors0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-passdb0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamba-util0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsamdb0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsmbclient0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsmbconf0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libsmbldap2-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libtevent-util0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:libwbclient0-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-ceph-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-client-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-libs-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-libs-python3-4.13.3+git.181.fc4672a5b81-3.3.1 SUSE Enterprise Storage 7:samba-winbind-4.13.3+git.181.fc4672a5b81-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210185-1/ https://www.suse.com/security/cve/CVE-2020-14383.html CVE-2020-14383 https://bugzilla.suse.com/1177613 SUSE Bug 1177613