RHSA-2016:0612: samba and samba4 security, bug fix, and enhancement update
Description
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.The following packages have been upgraded to a newer upstream version: Samba (4.2.10). Refer to the Release Notes listed in the References section for a complete list of changes.Security Fix(es):Note: While Samba packages as shipped in Red Hat Enterprise Linux do not support running Samba as an AD DC, this flaw applies to all roles Samba implements.Red Hat would like to thank the Samba project for reporting these issues. Upstream acknowledges Jouni Knuutinen (Synopsis) as the original reporter of CVE-2015-5370; and Stefan Metzmacher (SerNet) as the original reporter of CVE-2016-2118, CVE-2016-2110, CVE-2016-2112, CVE-2016-2113, CVE-2016-2114, and CVE-2016-2115.
Solution(s)
- redhat-upgrade-ipa-admintools
- redhat-upgrade-ipa-client
- redhat-upgrade-ipa-debuginfo
- redhat-upgrade-ipa-python
- redhat-upgrade-ipa-server
- redhat-upgrade-ipa-server-dns
- redhat-upgrade-ipa-server-selinux
- redhat-upgrade-ipa-server-trust-ad
- redhat-upgrade-ldb-tools
- redhat-upgrade-libldb
- redhat-upgrade-libldb-debuginfo
- redhat-upgrade-libldb-devel
- redhat-upgrade-libsmbclient
- redhat-upgrade-libsmbclient-devel
- redhat-upgrade-libtalloc
- redhat-upgrade-libtalloc-debuginfo
- redhat-upgrade-libtalloc-devel
- redhat-upgrade-libtdb
- redhat-upgrade-libtdb-debuginfo
- redhat-upgrade-libtdb-devel
- redhat-upgrade-libtevent
- redhat-upgrade-libtevent-debuginfo
- redhat-upgrade-libtevent-devel
- redhat-upgrade-libwbclient
- redhat-upgrade-libwbclient-devel
- redhat-upgrade-openchange
- redhat-upgrade-openchange-client
- redhat-upgrade-openchange-debuginfo
- redhat-upgrade-openchange-devel
- redhat-upgrade-openchange-devel-docs
- redhat-upgrade-pyldb
- redhat-upgrade-pyldb-devel
- redhat-upgrade-pytalloc
- redhat-upgrade-pytalloc-devel
- redhat-upgrade-python-tdb
- redhat-upgrade-python-tevent
- redhat-upgrade-samba
- redhat-upgrade-samba-client
- redhat-upgrade-samba-client-libs
- redhat-upgrade-samba-common
- redhat-upgrade-samba-common-libs
- redhat-upgrade-samba-common-tools
- redhat-upgrade-samba-dc
- redhat-upgrade-samba-dc-libs
- redhat-upgrade-samba-debuginfo
- redhat-upgrade-samba-devel
- redhat-upgrade-samba-libs
- redhat-upgrade-samba-pidl
- redhat-upgrade-samba-python
- redhat-upgrade-samba-test
- redhat-upgrade-samba-test-devel
- redhat-upgrade-samba-test-libs
- redhat-upgrade-samba-vfs-glusterfs
- redhat-upgrade-samba-winbind
- redhat-upgrade-samba-winbind-clients
- redhat-upgrade-samba-winbind-krb5-locator
- redhat-upgrade-samba-winbind-modules
- redhat-upgrade-samba4
- redhat-upgrade-samba4-client
- redhat-upgrade-samba4-common
- redhat-upgrade-samba4-dc
- redhat-upgrade-samba4-dc-libs
- redhat-upgrade-samba4-debuginfo
- redhat-upgrade-samba4-devel
- redhat-upgrade-samba4-libs
- redhat-upgrade-samba4-pidl
- redhat-upgrade-samba4-python
- redhat-upgrade-samba4-test
- redhat-upgrade-samba4-winbind
- redhat-upgrade-samba4-winbind-clients
- redhat-upgrade-samba4-winbind-krb5-locator
- redhat-upgrade-tdb-tools
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center