# RHSA-2021:1647: Security update for 26 packages

RHSA-2021:1647, released May 18, 2021, fixes 3 CVEs across 26 products. One of them is being exploited (CVE-2020-1472); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/rhsa-2021-1647
- Platform: Linux
- Released: May 18, 2021
- Priority: Patch now (Closes CVE-2020-1472, exploited (CISA KEV, ransomware))
- CVEs: 3, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://access.redhat.com/errata/RHSA-2021:1647

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [ctdb](https://patchblox.com/security/data/product/linux/ctdb.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [ctdb-tests](https://patchblox.com/security/data/product/linux/ctdb-tests.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [libsmbclient](https://patchblox.com/security/data/product/linux/libsmbclient.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [libsmbclient-devel](https://patchblox.com/security/data/product/linux/libsmbclient-devel.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [libwbclient](https://patchblox.com/security/data/product/linux/libwbclient.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [libwbclient-devel](https://patchblox.com/security/data/product/linux/libwbclient-devel.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [openchange](https://patchblox.com/security/data/product/linux/openchange.md) | RHEL 8 | 0:2.3-27.el8 |
| [python3-samba](https://patchblox.com/security/data/product/linux/python3-samba.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [python3-samba-test](https://patchblox.com/security/data/product/linux/python3-samba-test.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba](https://patchblox.com/security/data/product/linux/samba.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-client](https://patchblox.com/security/data/product/linux/samba-client.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-client-libs](https://patchblox.com/security/data/product/linux/samba-client-libs.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-common](https://patchblox.com/security/data/product/linux/samba-common.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-common-libs](https://patchblox.com/security/data/product/linux/samba-common-libs.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-common-tools](https://patchblox.com/security/data/product/linux/samba-common-tools.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-devel](https://patchblox.com/security/data/product/linux/samba-devel.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-krb5-printing](https://patchblox.com/security/data/product/linux/samba-krb5-printing.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-libs](https://patchblox.com/security/data/product/linux/samba-libs.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-pidl](https://patchblox.com/security/data/product/linux/samba-pidl.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-test](https://patchblox.com/security/data/product/linux/samba-test.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-test-libs](https://patchblox.com/security/data/product/linux/samba-test-libs.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-winbind](https://patchblox.com/security/data/product/linux/samba-winbind.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-winbind-clients](https://patchblox.com/security/data/product/linux/samba-winbind-clients.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-winbind-krb5-locator](https://patchblox.com/security/data/product/linux/samba-winbind-krb5-locator.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-winbind-modules](https://patchblox.com/security/data/product/linux/samba-winbind-modules.md) | RHEL 8 | 0:4.13.3-3.el8 |
| [samba-winexe](https://patchblox.com/security/data/product/linux/samba-winexe.md) | RHEL 8 | 0:4.13.3-3.el8 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2020-1472](https://patchblox.com/security/data/cve/CVE-2020-1472.md) | Patch now | Netlogon Elevation of Privilege Vulnerability | 10.0 | 0.9939 | CISA KEV, Ransomware |
| [CVE-2020-14318](https://patchblox.com/security/data/cve/CVE-2020-14318.md) | Routine | libsmbclient-devel: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil... | 4.3 | 0.0154 |  |
| [CVE-2020-14323](https://patchblox.com/security/data/cve/CVE-2020-14323.md) | Routine | samba-pidl: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil... | 5.5 | 0.0062 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
