Skip to content
OpenAdvisories
Critical ELSA-2016-0612 8 CVEs

Critical: samba and samba4 security, bug fix, and enhancement update (Oracle Linux 7)

Published Apr 12, 2016 · Updated Apr 12, 2016

Ecosystem: Oracle Linux

Summary

ipa
[4.2.0-15.0.1.6.1]
- Drop redhat-access-plugin-ipa requires for OL7
Blank out header-logo.png product-name.png
Replace login-screen-logo.png [20362818]

[4.2.0-15.6.1]
- Rebuild against newer Samba version
- Related: #1322690

libldb
[1.1.25-1]
- Rebase libldb to 1.1.25
- Related: rhbz#1322690

libtalloc
[2.1.5-1]
- Rebase to libtalloc 2.1.5
- Related: rhbz#1322690

libtdb
[1.3.8-1]
- Rebase libtdb to 1.3.8
- Related: rhbz#1322690

libtevent
[0.9.26-1]
- Rebase libtevent to 0.9.26
- Related: rhbz#1322690

openchange
[2.0-10]
- Add a patch to fix connection string (Related: #1322690)

samba
[4.2.10-6]
- Fix domain member winbind not being able to talk to trusted domains' DCs
- relates: #1322690

[4.2.10-5]
- Fix crash in smb.conf processing
- relates: #1322690

[4.2.10-4]
- Fix LDAP SASL bind with arcfour-hmac-md5
- resolves: #1322690

[4.2.10-3]
- Make sure the package owns /var/lib/samba and uses it for cache purposes
- resolves: #1322690

[4.2.10-2]
- Remove ldb modules and internal libraries for DC when not packaging DC build
- resolves: #1322690

[4.2.10-1]
- resolves: #1322690

Fixed packages 67

ReleasePackageFixed in
Oracle Linux · 7 ctdb 0:4.2.10-6.el7_2
Oracle Linux · 7 ctdb-devel 0:4.2.10-6.el7_2
Oracle Linux · 7 ctdb-tests 0:4.2.10-6.el7_2
Oracle Linux · 7 ipa-admintools 0:4.2.0-15.0.1.el7_2.6.1
Oracle Linux · 7 ipa-client 0:4.2.0-15.0.1.el7_2.6.1
Oracle Linux · 7 ipa-python 0:4.2.0-15.0.1.el7_2.6.1
Oracle Linux · 7 ipa-server 0:4.2.0-15.0.1.el7_2.6.1
Oracle Linux · 7 ipa-server-dns 0:4.2.0-15.0.1.el7_2.6.1
Oracle Linux · 7 ipa-server-selinux 0:3.0.0-47.el6_7.2
Oracle Linux · 7 ipa-server-trust-ad 0:4.2.0-15.0.1.el7_2.6.1
Oracle Linux · 7 ldb-tools 0:1.1.25-2.el6_7
Oracle Linux · 7 libldb 0:1.1.25-2.el6_7
Oracle Linux · 7 libldb-devel 0:1.1.25-2.el6_7
Oracle Linux · 7 libsmbclient 0:4.2.10-6.el7_2
Oracle Linux · 7 libsmbclient-devel 0:4.2.10-6.el7_2
Oracle Linux · 7 libtalloc 0:2.1.5-1.el7_2
Oracle Linux · 7 libtalloc-devel 0:2.1.5-1.el7_2
Oracle Linux · 7 libtdb 0:1.3.8-1.el7_2
Oracle Linux · 7 libtdb-devel 0:1.3.8-1.el7_2
Oracle Linux · 7 libtevent 0:0.9.26-2.el6_7
Oracle Linux · 7 libtevent-devel 0:0.9.26-2.el6_7
Oracle Linux · 7 libwbclient 0:4.2.10-6.el7_2
Oracle Linux · 7 libwbclient-devel 0:4.2.10-6.el7_2
Oracle Linux · 7 openchange 0:2.0-10.el7_2
Oracle Linux · 7 openchange-client 0:2.0-10.el7_2
Oracle Linux · 7 openchange-devel 0:2.0-10.el7_2
Oracle Linux · 7 openchange-devel-docs 0:2.0-10.el7_2
Oracle Linux · 7 pyldb 0:1.1.25-2.el6_7
Oracle Linux · 7 pyldb-devel 0:1.1.25-2.el6_7
Oracle Linux · 7 pytalloc 0:2.1.5-1.el7_2
Oracle Linux · 7 pytalloc-devel 0:2.1.5-1.el7_2
Oracle Linux · 7 python-tdb 0:1.3.8-1.el7_2
Oracle Linux · 7 python-tevent 0:0.9.26-2.el6_7
Oracle Linux · 7 samba 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-client 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-client-libs 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-common 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-common-libs 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-common-tools 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-dc 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-dc-libs 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-devel 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-libs 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-pidl 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-python 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-test 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-test-devel 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-test-libs 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-vfs-glusterfs 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-winbind 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-winbind-clients 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-winbind-krb5-locator 0:4.2.10-6.el7_2
Oracle Linux · 7 samba-winbind-modules 0:4.2.10-6.el7_2
Oracle Linux · 7 samba4 0:4.2.10-6.el6_7
Oracle Linux · 7 samba4-client 0:4.2.10-6.el6_7
Oracle Linux · 7 samba4-common 0:4.2.10-6.el6_7
Oracle Linux · 7 samba4-dc 0:4.2.10-6.el6_7
Oracle Linux · 7 samba4-dc-libs 0:4.2.10-6.el6_7
Oracle Linux · 7 samba4-devel 0:4.2.10-6.el6_7
Oracle Linux · 7 samba4-libs 0:4.2.10-6.el6_7
Oracle Linux · 7 samba4-pidl 0:4.2.10-6.el6_7
Oracle Linux · 7 samba4-python 0:4.2.10-6.el6_7
Oracle Linux · 7 samba4-test 0:4.2.10-6.el6_7
Oracle Linux · 7 samba4-winbind 0:4.2.10-6.el6_7
Oracle Linux · 7 samba4-winbind-clients 0:4.2.10-6.el6_7
Oracle Linux · 7 samba4-winbind-krb5-locator 0:4.2.10-6.el6_7
Oracle Linux · 7 tdb-tools 0:1.3.8-1.el7_2

Vulnerabilities 8

  • Unscored —
    CVE-2015-5370 EPSS 19%

    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC lay…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2110

    The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.…

    samba samba samba Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2016-2111

    The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain cont…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2112

    The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2113

    Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2114

    The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recogn…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2115 EPSS 10%

    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERP…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2118 Public exploit EPSS 37%

    The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x befo…

    samba samba Debian Ubuntu