{"schema_version":"1.7.3","id":"SUSE-SU-2020:14525-1","published":"2020-10-30T12:51:15Z","modified":"2026-02-04T03:53:31.155202Z","related":["CVE-2020-14318","CVE-2020-14323"],"upstream":["CVE-2020-14318","CVE-2020-14323"],"summary":"Security update for samba","details":"This update for samba fixes the following issues:\n\n- CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994).\n- CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).\n","affected":[{"package":{"name":"samba","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","purl":"pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-94.31.1"}]}],"ecosystem_specific":{"binaries":[{"ldapsmb":"1.34b-94.31.1","libldb1":"3.6.3-94.31.1","libsmbclient0":"3.6.3-94.31.1","libtalloc2":"3.6.3-94.31.1","libtdb1":"3.6.3-94.31.1","libtevent0":"3.6.3-94.31.1","libwbclient0":"3.6.3-94.31.1","samba":"3.6.3-94.31.1","samba-client":"3.6.3-94.31.1","samba-doc":"3.6.3-94.31.1","samba-krb-printing":"3.6.3-94.31.1","samba-winbind":"3.6.3-94.31.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14525-1.json"}},{"package":{"name":"samba-doc","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","purl":"pkg:rpm/suse/samba-doc&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-94.31.1"}]}],"ecosystem_specific":{"binaries":[{"ldapsmb":"1.34b-94.31.1","libldb1":"3.6.3-94.31.1","libsmbclient0":"3.6.3-94.31.1","libtalloc2":"3.6.3-94.31.1","libtdb1":"3.6.3-94.31.1","libtevent0":"3.6.3-94.31.1","libwbclient0":"3.6.3-94.31.1","samba":"3.6.3-94.31.1","samba-client":"3.6.3-94.31.1","samba-doc":"3.6.3-94.31.1","samba-krb-printing":"3.6.3-94.31.1","samba-winbind":"3.6.3-94.31.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14525-1.json"}},{"package":{"name":"samba","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","purl":"pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-94.31.1"}]}],"ecosystem_specific":{"binaries":[{"ldapsmb":"1.34b-94.31.1","libldb1":"3.6.3-94.31.1","libsmbclient0":"3.6.3-94.31.1","libsmbclient0-32bit":"3.6.3-94.31.1","libtalloc2":"3.6.3-94.31.1","libtalloc2-32bit":"3.6.3-94.31.1","libtdb1":"3.6.3-94.31.1","libtdb1-32bit":"3.6.3-94.31.1","libtevent0":"3.6.3-94.31.1","libtevent0-32bit":"3.6.3-94.31.1","libwbclient0":"3.6.3-94.31.1","libwbclient0-32bit":"3.6.3-94.31.1","samba":"3.6.3-94.31.1","samba-32bit":"3.6.3-94.31.1","samba-client":"3.6.3-94.31.1","samba-client-32bit":"3.6.3-94.31.1","samba-doc":"3.6.3-94.31.1","samba-krb-printing":"3.6.3-94.31.1","samba-winbind":"3.6.3-94.31.1","samba-winbind-32bit":"3.6.3-94.31.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14525-1.json"}},{"package":{"name":"samba-doc","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","purl":"pkg:rpm/suse/samba-doc&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-94.31.1"}]}],"ecosystem_specific":{"binaries":[{"ldapsmb":"1.34b-94.31.1","libldb1":"3.6.3-94.31.1","libsmbclient0":"3.6.3-94.31.1","libsmbclient0-32bit":"3.6.3-94.31.1","libtalloc2":"3.6.3-94.31.1","libtalloc2-32bit":"3.6.3-94.31.1","libtdb1":"3.6.3-94.31.1","libtdb1-32bit":"3.6.3-94.31.1","libtevent0":"3.6.3-94.31.1","libtevent0-32bit":"3.6.3-94.31.1","libwbclient0":"3.6.3-94.31.1","libwbclient0-32bit":"3.6.3-94.31.1","samba":"3.6.3-94.31.1","samba-32bit":"3.6.3-94.31.1","samba-client":"3.6.3-94.31.1","samba-client-32bit":"3.6.3-94.31.1","samba-doc":"3.6.3-94.31.1","samba-krb-printing":"3.6.3-94.31.1","samba-winbind":"3.6.3-94.31.1","samba-winbind-32bit":"3.6.3-94.31.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14525-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014525-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1173902"},{"type":"REPORT","url":"https://bugzilla.suse.com/1173994"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14318"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14323"}]}