Security update for samba (important)

An update that solves three vulnerabilities and has three
fixes is now available.

Description:

This update for samba fixes the following issues:

• CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold
  (bsc#1183574).
• CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids()
  (bsc#1184677).
• CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad
  DNs (bsc#1183572).
• Avoid free’ing our own pointer in memcache when memcache_trim attempts
  to reduce cache size (bsc#1179156).
• s3-libads: use dns name to open a ldap session (bsc#1184310).
• Adjust smbcacls ‘–propagate-inheritance’ feature to align with upstream
  (bsc#1178469).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.2:

  zypper in -t patch openSUSE-2021-636=1