Linux · Security advisory · May 25, 2021

ELSA-2021-1647: Security update for 26 packages

ELSA-2021-1647, released May 25, 2021, fixes 3 CVEs across 26 products. One of them is being exploited (CVE-2020-1472); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use

CVEs closed

1 rated Critical

Exploited

CVE-2020-1472

Exploitation more likely

Vendor assessment

Highest EPSS

0.9939

99th percentile

Priority of the 3 CVEs

Patch now 1
                                Urgent 0
                                High 0
                                Routine 2

Fixed package versions

Product	Release	Fixed in
ctdb	ol 8	0:4.13.3-3.el8
ctdb-tests	ol 8	0:4.13.3-3.el8
libsmbclient	ol 8	0:4.13.3-3.el8
libsmbclient-devel	ol 8	0:4.13.3-3.el8
libwbclient	ol 8	0:4.13.3-3.el8
libwbclient-devel	ol 8	0:4.13.3-3.el8
openchange	ol 8	0:2.3-27.0.1.el8
python3-samba	ol 8	0:4.13.3-3.el8
python3-samba-test	ol 8	0:4.13.3-3.el8
samba	ol 8	0:4.13.3-3.el8
samba-client	ol 8	0:4.13.3-3.el8
samba-client-libs	ol 8	0:4.13.3-3.el8
samba-common	ol 8	0:4.13.3-3.el8
samba-common-libs	ol 8	0:4.13.3-3.el8
samba-common-tools	ol 8	0:4.13.3-3.el8
samba-devel	ol 8	0:4.13.3-3.el8
samba-krb5-printing	ol 8	0:4.13.3-3.el8
samba-libs	ol 8	0:4.13.3-3.el8
samba-pidl	ol 8	0:4.13.3-3.el8
samba-test	ol 8	0:4.13.3-3.el8
samba-test-libs	ol 8	0:4.13.3-3.el8
samba-winbind	ol 8	0:4.13.3-3.el8
samba-winbind-clients	ol 8	0:4.13.3-3.el8
samba-winbind-krb5-locator	ol 8	0:4.13.3-3.el8
samba-winbind-modules	ol 8	0:4.13.3-3.el8
samba-winexe	ol 8	0:4.13.3-3.el8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Patch now	CVE-2020-1472	Netlogon Elevation of Privilege Vulnerability	10.0	0.9939	KEVRansomwareExploited
Routine	CVE-2020-14318	libsmbclient-devel: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil...	4.3	0.0154	None reported
Routine	CVE-2020-14323	samba-pidl: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil...	5.5	0.0062	None reported

Also fixes CVE-2020-1472

KB4565351
Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems and 17 more
KB4601319
Windows 10 Version 2004 for 32-bit Systems, Windows 10 Version 2004 for ARM64-based Systems, Windows 10 Version 2004 for x64-based Systems and 4 more
KB4601315
Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows 10 Version 1909 for x64-based Systems and 1 more
KB4601345
Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for ARM64-based Systems, Windows 10 Version 1809 for x64-based Systems and 2 more
KB4601318
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 and 5 more
KB4601348
Windows Server 2012, Windows Server 2012 (Server Core installation)
KB4601349
Windows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows Server 2012 R2 and 1 more
KB4601357
Windows Server 2012, Windows Server 2012 (Server Core installation)

Vendor advisory

https://linux.oracle.com/errata/ELSA-2021-1647.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo