RHSA-2016:0619Critical
Red Hat Security Advisory: samba security update
🔗 CVE IDs covered (6)
📋 Description
CVE-2015-5370 — samba: crash in dcesrv_auth_bind_ack due to missing error check CVE-2016-2110 — samba: Man-in-the-middle attacks possible with NTLMSSP authentication CVE-2016-2111 — samba: Spoofing vulnerability when domain controller is configured CVE-2016-2112 — samba: Missing downgrade detection CVE-2016-2115 — samba: Smb signing not required by default when smb client connection is used for ipc usage CVE-2016-2118 — samba: SAMR and LSA man in the middle attacks
🎯 Affected products174
- Red Hat Enterprise Linux HPC Node EUS (v. 6.6)
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6)
- Red Hat Enterprise Linux Server AUS (v. 6.2)
- Red Hat Enterprise Linux Server AUS (v. 6.4)
- Red Hat Enterprise Linux Server AUS (v. 6.5)
- Red Hat Enterprise Linux Server EUS (v. 6.6)
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2)
- Red Hat Enterprise Linux Server Optional AUS (v. 6.4)
- Red Hat Enterprise Linux Server Optional AUS (v. 6.5)
- Red Hat Enterprise Linux Server Optional EUS (v. 6.6)
- libsmbclient-0:3.6.23-30.el6_2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 6.2)
- libsmbclient-0:3.6.23-30.el6_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.2)
- libsmbclient-0:3.6.23-30.el6_4.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)
- libsmbclient-0:3.6.23-30.el6_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)
- libsmbclient-0:3.6.23-30.el6_5.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 6.5)
- libsmbclient-0:3.6.23-30.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.5)
- libsmbclient-0:3.6.23-30.el6_6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6)
- libsmbclient-0:3.6.23-30.el6_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
- libsmbclient-0:3.6.23-30.el6_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
- libsmbclient-0:3.6.23-30.el6_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
- libsmbclient-0:3.6.23-30.el6_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
- libsmbclient-0:3.6.23-30.el6_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
- libsmbclient-0:3.6.23-30.el6_6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6)
- libsmbclient-0:3.6.23-30.el6_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
- libsmbclient-devel-0:3.6.23-30.el6_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)
- libsmbclient-devel-0:3.6.23-30.el6_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)
- libsmbclient-devel-0:3.6.23-30.el6_4.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)
- libsmbclient-devel-0:3.6.23-30.el6_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)
- libsmbclient-devel-0:3.6.23-30.el6_5.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.5)
- libsmbclient-devel-0:3.6.23-30.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.5)
- +144 more not shown
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the smb service will be restarted automatically.
🔗 References (13)
- selfhttps://access.redhat.com/errata/RHSA-2016:0619
- externalhttps://access.redhat.com/security/updates/classification/#critical
- externalhttps://access.redhat.com/security/vulnerabilities/badlock
- externalhttps://access.redhat.com/articles/2253041
- externalhttp://badlock.org/
- externalhttps://access.redhat.com/articles/2243351
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1309987
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1311893
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1311902
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1311903
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1312084
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1317990
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0619.json