RHSA-2016:0614Critical

Red Hat Security Advisory: samba security, bug fix, and enhancement update

Published
April 12, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (8)

CVE-2016-2113 →CVE-2016-2114 →CVE-2016-2115 →CVE-2016-2118 →CVE-2015-5370 →CVE-2016-2110 →CVE-2016-2111 →CVE-2016-2112 →

📋 Description

CVE-2015-5370 — samba: crash in dcesrv_auth_bind_ack due to missing error check CVE-2016-2110 — samba: Man-in-the-middle attacks possible with NTLMSSP authentication CVE-2016-2111 — samba: Spoofing vulnerability when domain controller is configured CVE-2016-2112 — samba: Missing downgrade detection CVE-2016-2113 — samba: Server certificates not validated at client side CVE-2016-2114 — samba: Samba based active directory domain controller does not enforce smb signing CVE-2016-2115 — samba: Smb signing not required by default when smb client connection is used for ipc usage CVE-2016-2118 — samba: SAMR and LSA man in the middle attacks

🎯 Affected products109

  • Red Hat Gluster 3 Samba on RHEL-6
  • Red Hat Gluster 3 Samba on RHEL-7
  • Red Hat Gluster Storage Server 3.1 on RHEL-6
  • ctdb-0:4.2.11-2.el6rhs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-6
  • ctdb-0:4.2.11-2.el7rhgs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-7
  • ctdb-devel-0:4.2.11-2.el6rhs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-6
  • ctdb-devel-0:4.2.11-2.el7rhgs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-7
  • ctdb-tests-0:4.2.11-2.el6rhs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-6
  • ctdb-tests-0:4.2.11-2.el7rhgs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-7
  • ldb-tools-0:1.1.24-1.el6rhs.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6
  • ldb-tools-0:1.1.24-1.el7rhgs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-7
  • libldb-0:1.1.24-1.el6rhs.src as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6
  • libldb-0:1.1.24-1.el6rhs.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6
  • libldb-0:1.1.24-1.el7rhgs.src as a component of Red Hat Gluster 3 Samba on RHEL-7
  • libldb-0:1.1.24-1.el7rhgs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-7
  • libldb-debuginfo-0:1.1.24-1.el6rhs.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6
  • libldb-debuginfo-0:1.1.24-1.el7rhgs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-7
  • libldb-devel-0:1.1.24-1.el6rhs.x86_64 as a component of Red Hat Gluster Storage Server 3.1 on RHEL-6
  • libldb-devel-0:1.1.24-1.el7rhgs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-7
  • libsmbclient-0:4.2.11-2.el6rhs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-6
  • libsmbclient-0:4.2.11-2.el7rhgs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-7
  • libsmbclient-devel-0:4.2.11-2.el6rhs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-6
  • libsmbclient-devel-0:4.2.11-2.el7rhgs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-7
  • libtalloc-0:2.1.5-1.el6rhs.src as a component of Red Hat Gluster 3 Samba on RHEL-6
  • libtalloc-0:2.1.5-1.el6rhs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-6
  • libtalloc-0:2.1.5-1.el7rhgs.src as a component of Red Hat Gluster 3 Samba on RHEL-7
  • libtalloc-0:2.1.5-1.el7rhgs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-7
  • libtalloc-debuginfo-0:2.1.5-1.el6rhs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-6
  • libtalloc-debuginfo-0:2.1.5-1.el7rhgs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-7
  • libtalloc-devel-0:2.1.5-1.el6rhs.x86_64 as a component of Red Hat Gluster 3 Samba on RHEL-6
  • +79 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the smb service will be restarted automatically.

🔗 References (16)