Skip to content
OpenAdvisories
Low ELSA-2017-1950 1 CVE

Low: samba security, bug fix, and enhancement update (Oracle Linux 7)

Published Aug 7, 2017 · Updated Aug 7, 2017

Summary

[4.6.2-8]
- resolves: #1459936 - Fix regression with 'follow symlinks = no'

[4.6.2-7]
- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind

[4.6.2-6]
- resolves: #1459179 - Fix smbclient session setup printing

[4.6.2-5]
- related: #1277999 - Add missing patchset

[4.6.2-4]
- resolves: #1431986 - Fix expand_msdfs VFS module

[4.6.2-3]
- resolves: #1450785 - Security fix for CVE-2017-7494

[4.6.2-2]
- resolves: #1448544 - Fix spoolss 32bit driver upload

[4.6.2-1]
- resolves: #1435734 - Fix refreshing winbind tickets

[4.6.2-0]
- Update to Samba 4.6.2
- related: #1430260 - Security fix for CVE-2017-2619

[4.6.1-0]
- Update to Samba 4.6.1
- resolves: #1430260 - Security fix for CVE-2017-2619

[4.6.0-5]
- related: #1391954 - Fix kerberos cross-realm referrals
- resolves: #1430755 - Fix 'net ads' keytab handling

[4.6.0-4]
- Export internal arcfour_crypt_blob in Python as samba.arcfour_encrypt
- related: #1391954 - Update to Samba 4.6.0

[4.6.0-3]
- Ensure we set realm when updating ccache in auth/credentials
- resolves: #1430759 - use GSSAPI gss_acquire_cred_from call for gssproxy support

[4.6.0-2]
- resolves: #1430759 - use GSSAPI gss_acquire_cred_from call for gssproxy support

[4.6.0-1]
- related: #1391954 - Update to Samba 4.6.0
- resolves: #1401505 - Improved idmap_hash documentation
- resolves: #1218926 - Samba ignores default_keytab_name in krb5.conf
- resolves: #1389786 - Add 'net ads dns unregister'

[4.6.0-0.1.rc4]
- related: #1391954 - Update to Samba 4.6.0rc4
- resolves: #1420130 - samba_krb5_wrapper does not list devices when called with
no arguments
- resolves: #1277999 - Change RPC port range to Windows defaults

[4.6.0-0.1.rc3]
- resolves: #1391954 - Update to Samba 4.6.0rc3
- resolves: #1271082 - Wrong groups listed when id command is called before login
- resolves: #1327810 - Use 'printcap cache time' for the house keeping interval
- resolves: #1356932 - Improve documentation for 'ldap ssl' in smb.conf manpage
- resolves: #1365111 - Fix printer removal if 'List in Directory' checkbox is
unticked and printer is not listed in AD
- resolves: #1368439 - Fix ntlm_auth wrong password issues
- resolves: #1397871 - Include the system krb5.conf in winbinds generated conf
- resolves: #1397891 - Fix marsalling of spoolss SetPrinter info level 2
- resolves: #1397895 - Add missing support APD_COPY_FROM_DIRECTORY in
AddPrinterDriver
- resolves: #1403242 - Samba can not access trusted domains through transitive
trusts
- resolves: #1403975 - Fix trusted domain logins
- resolves: #1411978 - Include the system krb5.conf in winbinds generated conf
- resolves: #1416746 - Fix division by zero error in ctdb 05.system event script

Fixed packages 24

ReleasePackageFixed in
Oracle Linux · 7 libsmbclient 0:4.6.2-8.el7
Oracle Linux · 7 libsmbclient-devel 0:4.6.2-8.el7
Oracle Linux · 7 libwbclient 0:4.6.2-8.el7
Oracle Linux · 7 libwbclient-devel 0:4.6.2-8.el7
Oracle Linux · 7 samba 0:4.6.2-8.el7
Oracle Linux · 7 samba-client 0:4.6.2-8.el7
Oracle Linux · 7 samba-client-libs 0:4.6.2-8.el7
Oracle Linux · 7 samba-common 0:4.6.2-8.el7
Oracle Linux · 7 samba-common-libs 0:4.6.2-8.el7
Oracle Linux · 7 samba-common-tools 0:4.6.2-8.el7
Oracle Linux · 7 samba-dc 0:4.6.2-8.el7
Oracle Linux · 7 samba-dc-libs 0:4.6.2-8.el7
Oracle Linux · 7 samba-devel 0:4.6.2-8.el7
Oracle Linux · 7 samba-krb5-printing 0:4.6.2-8.el7
Oracle Linux · 7 samba-libs 0:4.6.2-8.el7
Oracle Linux · 7 samba-pidl 0:4.6.2-8.el7
Oracle Linux · 7 samba-python 0:4.6.2-8.el7
Oracle Linux · 7 samba-test 0:4.6.2-8.el7
Oracle Linux · 7 samba-test-libs 0:4.6.2-8.el7
Oracle Linux · 7 samba-vfs-glusterfs 0:4.6.2-8.el7
Oracle Linux · 7 samba-winbind 0:4.6.2-8.el7
Oracle Linux · 7 samba-winbind-clients 0:4.6.2-8.el7
Oracle Linux · 7 samba-winbind-krb5-locator 0:4.6.2-8.el7
Oracle Linux · 7 samba-winbind-modules 0:4.6.2-8.el7

Vulnerabilities 1

  • Unscored —

    smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop …