RHSA-2016:0612Critical

Red Hat Security Advisory: samba and samba4 security, bug fix, and enhancement update

Published
April 13, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (8)

CVE-2016-2115 →CVE-2016-2118 →CVE-2015-5370 →CVE-2016-2110 →CVE-2016-2111 →CVE-2016-2112 →CVE-2016-2113 →CVE-2016-2114 →

📋 Description

CVE-2015-5370 — samba: crash in dcesrv_auth_bind_ack due to missing error check CVE-2016-2110 — samba: Man-in-the-middle attacks possible with NTLMSSP authentication CVE-2016-2111 — samba: Spoofing vulnerability when domain controller is configured CVE-2016-2112 — samba: Missing downgrade detection CVE-2016-2113 — samba: Server certificates not validated at client side CVE-2016-2114 — samba: Samba based active directory domain controller does not enforce smb signing CVE-2016-2115 — samba: Smb signing not required by default when smb client connection is used for ipc usage CVE-2016-2118 — samba: SAMR and LSA man in the middle attacks

🎯 Affected products200

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • ctdb-0:4.2.10-6.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • ctdb-devel-0:4.2.10-6.el7_2.i686 as a component of Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • ctdb-devel-0:4.2.10-6.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • ctdb-tests-0:4.2.10-6.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Resilient Storage (v. 7)
  • ipa-0:3.0.0-47.el6_7.2.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • ipa-0:3.0.0-47.el6_7.2.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • ipa-0:3.0.0-47.el6_7.2.src as a component of Red Hat Enterprise Linux Server (v. 6)
  • ipa-0:3.0.0-47.el6_7.2.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • ipa-0:4.2.0-15.el7_2.6.1.src as a component of Red Hat Enterprise Linux Client (v. 7)
  • ipa-0:4.2.0-15.el7_2.6.1.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • ipa-0:4.2.0-15.el7_2.6.1.src as a component of Red Hat Enterprise Linux Server (v. 7)
  • ipa-0:4.2.0-15.el7_2.6.1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • ipa-admintools-0:3.0.0-47.el6_7.2.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the smb service will be restarted automatically.

🔗 References (16)