<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for ldb, samba</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2022:0361-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2022-02-10T14:12:34Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2022-02-10T14:12:34Z</InitialReleaseDate>
    <CurrentReleaseDate>2022-02-10T14:12:34Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for ldb, samba</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for ldb, samba fixes the following issues:

Changes in ldb:

+ CVE-2020-25718: An RODC can issue (forge) administrator
  tickets to other servers; (bsc#1192246)
+ CVE-2021-3738: Fixed a crash in dsdb stack (bsc#1192215)

Release ldb 2.2.2

+ Corrected python behaviour for 'in' for LDAP attributes
  contained as part of ldb.Message
+ Fix memory handling in ldb.msg_diff
+ Backport bronze bit fixes, tests, and selftest improvements.

Changes in samba:

- CVE-2021-44142: Fixed an Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859)

- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).

- Fix regression introduced by CVE-2020-25717 patches, winbindd
  does not start when 'allow trusted domains' is off; (bso#14899);

- CVE-2020-25717: Fixed that a user on the domain can become root on
  domain members; (bsc#1192284); (bso#14556).
- CVE-2020-25721: auth: Fill in the new HAS_SAM_NAME_AND_SID
  values; (bsc#1192505); (bso#14564).
- CVE-2020-25718: An RODC can issue (forge) administrator tickets
  to other servers; (bsc#1192246);(bso#14558).
- CVE-2020-25719: Fixed AD DC Username based races when no PAC
  is given;(bsc#1192247);(bso#14561).
- CVE-2020-25722: Fixed that AD DC UPN vs samAccountName not checked
  (top-level bug for AD DC validation issues);(bsc#1192283);
  (bso#14564).
- CVE-2021-3738: Fixed a crash in dsdb stack;(bsc#1192215);
  (bso#14468).
- CVE-2021-23192: Fixed that dcerpc requests don't check all fragments
  against the first auth_state;(bsc#1192214);(bso#14875).

- CVE-2016-2124: don't fallback to non spnego authentication if we
  require kerberos; (bsc#1014440); (bso#12444).

Update to 4.13.13

   * rodc_rwdc test flaps;(bso#14868).
   * Backport bronze bit fixes, tests, and selftest improvements;
     (bso#14881).
   * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY]
     'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba
     with embedded Heimdal;(bso#14642).
   * Python ldb.msg_diff() memory handling failure;(bso#14836).
   * 'in' operator on ldb.Message is case sensitive;(bso#14845).
   * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED;(bso#14871).
   * Allow special chars like '@' in samAccountName when generating
     the salt;(bso#14874).
   * Fix transit path validation;(bso#12998).
   * Prepare to operate with MIT krb5 &gt;= 1.20;(bso#14870).
   * rpcclient NetFileEnum and net rpc file both cause lock order
     violation: brlock.tdb, share_entries.tdb;(bso#14645).
   * Python ldb.msg_diff() memory handling failure;(bso#14836).
   * Release LDB 2.3.1 for Samba 4.14.9;(bso#14848).

- Update to 4.13.12

   * Address a signifcant performance regression in database access
     in the AD DC since Samba 4.12;(bso#14806).
   * Fix performance regression in lsa_LookupSids3/LookupNames4
     since Samba 4.9 by using an explicit database handle cache;
     (bso#14807).
   * An unuthenticated user can crash the AD DC KDC by omitting the
     server name in a TGS-REQ;(bso#14817).
   * Address flapping samba_tool_drs_showrepl test;(bso#14818).
   * Address flapping dsdb_schema_attributes test;(bso#14819).
   * An unuthenticated user can crash the AD DC KDC by omitting the
     server name in a TGS-REQ;(bso#14817).
   * Fix CTDB flag/status update race conditions(bso#14784).

- Update to 4.13.11

   * smbd: panic on force-close share during offload write;
     (bso#14769).
   * Fix returned attributes on fake quota file handle and avoid
     hitting the VFS;(bso#14731).
   * smbd: 'deadtime' parameter doesn't work anymore;(bso#14783).
   * net conf list crashes when run as normal user;(bso#14787).
   * Work around special SMB2 READ response behavior of NetApp Ontap
     7.3.7;(bso#14607).
   * Start the SMB encryption as soon as possible;(bso#14793).
   * Winbind should not start if the socket path for the privileged
     pipe is too long;(bso#14792).

- Fix 'net rpc' authentication when using the machine account;
  (bsc#1189017); (bso#14796);

- Fix dependency problem upgrading from libndr0 to libndr1;
  (bsc#1189875);
- Fix dependency problem upgrading from libsmbldap0 to libsmbldap2;
  (bsc#1189875);
- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);
- Add Certificate Auto Enrollment Policy; (jsc#SLE-18456).

- Update to 4.13.10

  * s3: smbd: Ensure POSIX default ACL is mapped into returned
    Windows ACL for directory handles; (bso#14708);
  * Take a copy to make sure we don't reference free'd memory; (bso#14721);
  * s3: lib: Fix talloc heirarcy error in parent_smb_fname(); (bso#14722);
  * s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in
    change_file_owner_to_parent() error path; (bso#14736);
  * samba-tool: Give better error information when the
    'domain backup restore' fails with a duplicate SID; (bso#14575);
  * smbd: Correctly initialize close timestamp fields; (bso#14714);
  * Spotlight RPC service doesn't work with vfs_glusterfs; (bso#14740);
  * ctdb: Fix a crash in run_proc_signal_handler(); (bso#14475);
  * gensec_krb5: Restore ipv6 support for kpasswd; (bso#14750);
  * smbXsrv_{open,session,tcon}: Protect
    smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records; (bso#14752);
  * samba-tool domain backup offline doesn't work against bind DLZ
    backend; (bso#14027);
  * netcmd: Use next_free_rid() function to calculate a SID for
    restoring a backup; (bso#14669);

- Update to 4.13.9

  * s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success; (bso#14696);
  * Add documentation for dsdb_group_audit and dsdb_group_json_audit
    to 'log level', synchronise 'log level' in smb.conf with the code; (bso#14689);
  * Fix smbd panic when two clients open same file; (bso#14672);
  * Fix memory leak in the RPC server; (bso#14675);
  * s3: smbd: Fix deferred renames; (bso#14679);
  * s3-iremotewinspool: Set the per-request memory context; (bso#14675);
  * rpc_server3: Fix a memleak for internal pipes; (bso#14675);
  * third_party: Update socket_wrapper to version 1.3.2; (bso#11899);
  * third_party: Update socket_wrapper to version 1.3.3; (bso#14639);
  * idmap_rfc2307 and idmap_nss return wrong mapping for uid/gid
    conflict; (bso#14663);
  * Fix the build on OmniOS; (bso#14288);

- Update to 4.13.8

  * CVE-2021-20254: Fix buffer overrun in sids_to_unixids(); (bso#14571

- Update to 4.13.7

  * Release with dependency on ldb version 2.2.1.
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2022-361,SUSE-Storage-7-2022-361</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220361-1/</URL>
      <Description>Link for SUSE-SU-2022:0361-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2022-February/010209.html</URL>
      <Description>E-Mail link for SUSE-SU-2022:0361-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1014440</URL>
      <Description>SUSE Bug 1014440</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1188727</URL>
      <Description>SUSE Bug 1188727</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1189017</URL>
      <Description>SUSE Bug 1189017</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1189875</URL>
      <Description>SUSE Bug 1189875</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1192214</URL>
      <Description>SUSE Bug 1192214</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1192215</URL>
      <Description>SUSE Bug 1192215</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1192246</URL>
      <Description>SUSE Bug 1192246</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1192247</URL>
      <Description>SUSE Bug 1192247</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1192283</URL>
      <Description>SUSE Bug 1192283</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1192284</URL>
      <Description>SUSE Bug 1192284</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1192505</URL>
      <Description>SUSE Bug 1192505</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1192849</URL>
      <Description>SUSE Bug 1192849</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1194859</URL>
      <Description>SUSE Bug 1194859</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-2124/</URL>
      <Description>SUSE CVE CVE-2016-2124 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-17049/</URL>
      <Description>SUSE CVE CVE-2020-17049 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-25717/</URL>
      <Description>SUSE CVE CVE-2020-25717 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-25718/</URL>
      <Description>SUSE CVE CVE-2020-25718 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-25719/</URL>
      <Description>SUSE CVE CVE-2020-25719 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-25721/</URL>
      <Description>SUSE CVE CVE-2020-25721 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-25722/</URL>
      <Description>SUSE CVE CVE-2020-25722 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-20254/</URL>
      <Description>SUSE CVE CVE-2021-20254 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-23192/</URL>
      <Description>SUSE CVE CVE-2021-23192 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-3738/</URL>
      <Description>SUSE CVE CVE-2021-3738 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-44142/</URL>
      <Description>SUSE CVE CVE-2021-44142 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Enterprise Storage 7">
      <Branch Type="Product Name" Name="SUSE Enterprise Storage 7">
        <FullProductName ProductID="SUSE Enterprise Storage 7" CPE="cpe:/o:suse:ses:7">SUSE Enterprise Storage 7</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="ctdb-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="ctdb-4.13.13+git.545.5897c2d94f3-3.12.1">ctdb-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ctdb-pcp-pmda-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="ctdb-pcp-pmda-4.13.13+git.545.5897c2d94f3-3.12.1">ctdb-pcp-pmda-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ctdb-tests-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="ctdb-tests-4.13.13+git.545.5897c2d94f3-3.12.1">ctdb-tests-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ldb-tools-2.2.2-4.6.1">
      <FullProductName ProductID="ldb-tools-2.2.2-4.6.1">ldb-tools-2.2.2-4.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1">libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libdcerpc-binding0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libdcerpc-binding0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libdcerpc-binding0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libdcerpc-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libdcerpc-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libdcerpc-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libdcerpc-samr-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libdcerpc-samr-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libdcerpc-samr-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libdcerpc-samr0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libdcerpc-samr0-4.13.13+git.545.5897c2d94f3-3.12.1">libdcerpc-samr0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libdcerpc-samr0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libdcerpc-samr0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libdcerpc-samr0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1">libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libdcerpc0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libdcerpc0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libdcerpc0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libldb-devel-2.2.2-4.6.1">
      <FullProductName ProductID="libldb-devel-2.2.2-4.6.1">libldb-devel-2.2.2-4.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libldb2-2.2.2-4.6.1">
      <FullProductName ProductID="libldb2-2.2.2-4.6.1">libldb2-2.2.2-4.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libldb2-64bit-2.2.2-4.6.1">
      <FullProductName ProductID="libldb2-64bit-2.2.2-4.6.1">libldb2-64bit-2.2.2-4.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libndr-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libndr-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libndr-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libndr-krb5pac-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libndr-krb5pac-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libndr-krb5pac-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1">libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libndr-krb5pac0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libndr-krb5pac0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libndr-krb5pac0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libndr-nbt-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libndr-nbt-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libndr-nbt-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1">libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libndr-nbt0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libndr-nbt0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libndr-nbt0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libndr-standard-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libndr-standard-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libndr-standard-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1">libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libndr-standard0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libndr-standard0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libndr-standard0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libndr1-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libndr1-4.13.13+git.545.5897c2d94f3-3.12.1">libndr1-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libndr1-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libndr1-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libndr1-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libnetapi-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libnetapi-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libnetapi-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libnetapi-devel-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libnetapi-devel-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libnetapi-devel-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1">libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libnetapi0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libnetapi0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libnetapi0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-credentials-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-credentials-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-credentials-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-credentials0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-credentials0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-credentials0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-errors-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-errors-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-errors-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-errors0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-errors0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-errors0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-hostconfig-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-hostconfig-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-hostconfig-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-hostconfig0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-hostconfig0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-hostconfig0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-passdb-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-passdb-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-passdb-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-passdb0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-passdb0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-passdb0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-policy-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-policy-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-policy-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-policy-python3-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-policy-python3-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-policy-python3-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-policy0-python3-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-policy0-python3-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-policy0-python3-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-policy0-python3-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-policy0-python3-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-policy0-python3-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-util-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-util-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-util-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamba-util0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamba-util0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-util0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamdb-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamdb-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libsamdb-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1">libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsamdb0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsamdb0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libsamdb0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsmbclient-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsmbclient-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libsmbclient-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1">libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsmbclient0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsmbclient0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libsmbclient0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsmbconf-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsmbconf-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libsmbconf-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1">libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsmbconf0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsmbconf0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libsmbconf0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsmbldap-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsmbldap-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libsmbldap-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1">libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libsmbldap2-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libsmbldap2-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libsmbldap2-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libtevent-util-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libtevent-util-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libtevent-util-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1">libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libtevent-util0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libtevent-util0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libtevent-util0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwbclient-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libwbclient-devel-4.13.13+git.545.5897c2d94f3-3.12.1">libwbclient-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1">libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwbclient0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="libwbclient0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">libwbclient0-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-ldb-2.2.2-4.6.1">
      <FullProductName ProductID="python3-ldb-2.2.2-4.6.1">python3-ldb-2.2.2-4.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-ldb-64bit-2.2.2-4.6.1">
      <FullProductName ProductID="python3-ldb-64bit-2.2.2-4.6.1">python3-ldb-64bit-2.2.2-4.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-ldb-devel-2.2.2-4.6.1">
      <FullProductName ProductID="python3-ldb-devel-2.2.2-4.6.1">python3-ldb-devel-2.2.2-4.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-4.13.13+git.545.5897c2d94f3-3.12.1">samba-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-ad-dc-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-ad-dc-4.13.13+git.545.5897c2d94f3-3.12.1">samba-ad-dc-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-ad-dc-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-ad-dc-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">samba-ad-dc-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1">samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-client-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-client-4.13.13+git.545.5897c2d94f3-3.12.1">samba-client-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-client-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-client-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">samba-client-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-core-devel-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-core-devel-4.13.13+git.545.5897c2d94f3-3.12.1">samba-core-devel-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-doc-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-doc-4.13.13+git.545.5897c2d94f3-3.12.1">samba-doc-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-dsdb-modules-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-dsdb-modules-4.13.13+git.545.5897c2d94f3-3.12.1">samba-dsdb-modules-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-gpupdate-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-gpupdate-4.13.13+git.545.5897c2d94f3-3.12.1">samba-gpupdate-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-ldb-ldap-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-ldb-ldap-4.13.13+git.545.5897c2d94f3-3.12.1">samba-ldb-ldap-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1">samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-libs-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-libs-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">samba-libs-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1">samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-libs-python3-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-libs-python3-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">samba-libs-python3-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-python3-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-python3-4.13.13+git.545.5897c2d94f3-3.12.1">samba-python3-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-test-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-test-4.13.13+git.545.5897c2d94f3-3.12.1">samba-test-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1">samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="samba-winbind-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">
      <FullProductName ProductID="samba-winbind-64bit-4.13.13+git.545.5897c2d94f3-3.12.1">samba-winbind-64bit-4.13.13+git.545.5897c2d94f3-3.12.1</FullProductName>
    </Branch>
    <Relationship ProductReference="ctdb-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:ctdb-4.13.13+git.545.5897c2d94f3-3.12.1">ctdb-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1">libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1">libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libldb2-2.2.2-4.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libldb2-2.2.2-4.6.1">libldb2-2.2.2-4.6.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1">libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1">libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1">libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libndr1-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libndr1-4.13.13+git.545.5897c2d94f3-3.12.1">libndr1-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1">libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1">libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1">libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1">libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1">libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1">libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1">libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1">libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-ldb-2.2.2-4.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:python3-ldb-2.2.2-4.6.1">python3-ldb-2.2.2-4.6.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="samba-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:samba-4.13.13+git.545.5897c2d94f3-3.12.1">samba-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1">samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="samba-client-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:samba-client-4.13.13+git.545.5897c2d94f3-3.12.1">samba-client-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1">samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1">samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1">samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.</Note>
    </Notes>
    <CVE>CVE-2016-2124</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:ctdb-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libldb2-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr1-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python3-ldb-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-client-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.9</BaseScoreV2>
        <VectorV2>AV:A/AC:M/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220361-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-2124.html</URL>
        <Description>CVE-2016-2124</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1014440</URL>
        <Description>SUSE Bug 1014440</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">&lt;p&gt;A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).&lt;/p&gt;
&lt;p&gt;To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it.&lt;/p&gt;
&lt;p&gt;The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.&lt;/p&gt;
</Note>
    </Notes>
    <CVE>CVE-2020-17049</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:ctdb-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libldb2-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr1-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python3-ldb-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-client-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>9</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.2</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220361-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-17049.html</URL>
        <Description>CVE-2020-17049</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1178754</URL>
        <Description>SUSE Bug 1178754</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1178764</URL>
        <Description>SUSE Bug 1178764</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.</Note>
    </Notes>
    <CVE>CVE-2020-25717</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:ctdb-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libldb2-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr1-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python3-ldb-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-client-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>8.5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:C/I:C/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>8.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220361-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-25717.html</URL>
        <Description>CVE-2020-25717</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1192284</URL>
        <Description>SUSE Bug 1192284</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1192505</URL>
        <Description>SUSE Bug 1192505</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1192601</URL>
        <Description>SUSE Bug 1192601</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1192849</URL>
        <Description>SUSE Bug 1192849</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193011</URL>
        <Description>SUSE Bug 1193011</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1194049</URL>
        <Description>SUSE Bug 1194049</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1194307</URL>
        <Description>SUSE Bug 1194307</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1195815</URL>
        <Description>SUSE Bug 1195815</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196344</URL>
        <Description>SUSE Bug 1196344</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196717</URL>
        <Description>SUSE Bug 1196717</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196920</URL>
        <Description>SUSE Bug 1196920</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1205061</URL>
        <Description>SUSE Bug 1205061</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This would allow an RODC to print administrator tickets.</Note>
    </Notes>
    <CVE>CVE-2020-25718</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:ctdb-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libldb2-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr1-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python3-ldb-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-client-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220361-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-25718.html</URL>
        <Description>CVE-2020-25718</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1192246</URL>
        <Description>SUSE Bug 1192246</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.</Note>
    </Notes>
    <CVE>CVE-2020-25719</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:ctdb-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libldb2-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr1-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python3-ldb-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-client-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>9</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.2</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220361-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-25719.html</URL>
        <Description>CVE-2020-25719</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1192247</URL>
        <Description>SUSE Bug 1192247</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID (and samAccountName) in issued tickets.</Note>
    </Notes>
    <CVE>CVE-2020-25721</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:ctdb-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libldb2-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr1-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python3-ldb-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-client-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.6</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220361-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-25721.html</URL>
        <Description>CVE-2020-25721</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1192505</URL>
        <Description>SUSE Bug 1192505</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1195833</URL>
        <Description>SUSE Bug 1195833</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.</Note>
    </Notes>
    <CVE>CVE-2020-25722</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:ctdb-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libldb2-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr1-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python3-ldb-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-client-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>8.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220361-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-25722.html</URL>
        <Description>CVE-2020-25722</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1192283</URL>
        <Description>SUSE Bug 1192283</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.</Note>
    </Notes>
    <CVE>CVE-2021-20254</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:ctdb-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libldb2-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr1-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python3-ldb-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-client-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5.5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:P/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220361-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-20254.html</URL>
        <Description>CVE-2021-20254</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1184677</URL>
        <Description>SUSE Bug 1184677</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1185886</URL>
        <Description>SUSE Bug 1185886</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1189860</URL>
        <Description>SUSE Bug 1189860</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.</Note>
    </Notes>
    <CVE>CVE-2021-23192</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:ctdb-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libldb2-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr1-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python3-ldb-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-client-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:N/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220361-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-23192.html</URL>
        <Description>CVE-2021-23192</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1192214</URL>
        <Description>SUSE Bug 1192214</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In DCE/RPC it is possible to share the handles (cookies for resource state) between multiple connections via a mechanism called 'association groups'. These handles can reference connections to our sam.ldb database. However while the database was correctly shared, the user credentials state was only pointed at, and when one connection within that association group ended, the database would be left pointing at an invalid 'struct session_info'. The most likely outcome here is a crash, but it is possible that the use-after-free could instead allow different user state to be pointed at and this might allow more privileged access.</Note>
    </Notes>
    <CVE>CVE-2021-3738</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:ctdb-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libldb2-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr1-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python3-ldb-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-client-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:P/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.6</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220361-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-3738.html</URL>
        <Description>CVE-2021-3738</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1192215</URL>
        <Description>SUSE Bug 1192215</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.</Note>
    </Notes>
    <CVE>CVE-2021-44142</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7:ctdb-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc-binding0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libdcerpc0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libldb2-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-krb5pac0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-nbt0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr-standard0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libndr1-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libnetapi0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-credentials0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-errors0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-hostconfig0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-passdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamba-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsamdb0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbconf0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libsmbldap2-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libtevent-util0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:libwbclient0-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:python3-ldb-2.2.2-4.6.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-ceph-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-client-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-libs-python3-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:samba-winbind-4.13.13+git.545.5897c2d94f3-3.12.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>9</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>9.9</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220361-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-44142.html</URL>
        <Description>CVE-2021-44142</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1194859</URL>
        <Description>SUSE Bug 1194859</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1195611</URL>
        <Description>SUSE Bug 1195611</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196455</URL>
        <Description>SUSE Bug 1196455</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1199646</URL>
        <Description>SUSE Bug 1199646</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
