Red Hat Security AdvisoryRHSA-2017:1390
samba security update
Released 2017-06-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.2) libsmbclient-4.2.10-11.el7_2, libwbclient-4.2.10-11.el7_2, samba-4.2.10-11.el7_2 +9
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2) libsmbclient-devel-4.2.10-11.el7_2, libwbclient-devel-4.2.10-11.el7_2, samba-4.2.10-11.el7_2 +10
- Red Hat Enterprise Linux HPC Node EUS (v. 6.7) samba-3.6.23-32.el6_7, samba-client-3.6.23-32.el6_7, samba-common-3.6.23-32.el6_7 +2
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) libsmbclient-3.6.23-32.el6_7, libsmbclient-devel-3.6.23-32.el6_7, samba-3.6.23-32.el6_7 +6
- Red Hat Enterprise Linux Server AUS (v. 6.2) libsmbclient-3.6.23-32.el6_2, samba-3.6.23-32.el6_2, samba-client-3.6.23-32.el6_2 +3
- Red Hat Enterprise Linux Server AUS (v. 6.4) libsmbclient-3.6.23-32.el6_4, samba-3.6.23-32.el6_4, samba-client-3.6.23-32.el6_4 +3
- Red Hat Enterprise Linux Server AUS (v. 6.5) libsmbclient-3.6.23-32.el6_5, samba-3.6.23-32.el6_5, samba-client-3.6.23-32.el6_5 +3
- Red Hat Enterprise Linux Server AUS (v. 6.6) libsmbclient-3.6.23-32.el6_6, samba-3.6.23-32.el6_6, samba-client-3.6.23-32.el6_6 +3
- Red Hat Enterprise Linux Server EUS (v. 6.7) libsmbclient-3.6.23-32.el6_7, libsmbclient-3.6.23-32.el6_7.ppc, samba-3.6.23-32.el6_7 +6
- Red Hat Enterprise Linux Server EUS (v. 7.2) libsmbclient-4.2.10-11.el7_2, libsmbclient-4.2.10-11.el7_2.ppc, libwbclient-4.2.10-11.el7_2 +15
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) libsmbclient-devel-3.6.23-32.el6_2, samba-3.6.23-32.el6_2, samba-doc-3.6.23-32.el6_2 +4
- Red Hat Enterprise Linux Server Optional AUS (v. 6.4) libsmbclient-devel-3.6.23-32.el6_4, samba-3.6.23-32.el6_4, samba-doc-3.6.23-32.el6_4 +4
- Red Hat Enterprise Linux Server Optional AUS (v. 6.5) libsmbclient-devel-3.6.23-32.el6_5, samba-3.6.23-32.el6_5, samba-doc-3.6.23-32.el6_5 +4
- Red Hat Enterprise Linux Server Optional AUS (v. 6.6) libsmbclient-devel-3.6.23-32.el6_6, samba-doc-3.6.23-32.el6_6, samba-domainjoin-gui-3.6.23-32.el6_6 +3
- Red Hat Enterprise Linux Server Optional EUS (v. 6.7) libsmbclient-devel-3.6.23-32.el6_7, libsmbclient-devel-3.6.23-32.el6_7.ppc, samba-doc-3.6.23-32.el6_7 +6
- Red Hat Enterprise Linux Server Optional EUS (v. 7.2) libsmbclient-devel-4.2.10-11.el7_2, libsmbclient-devel-4.2.10-11.el7_2.ppc, libwbclient-devel-4.2.10-11.el7_2 +13
- Red Hat Enterprise Linux Server Optional TUS (v. 6.5) libsmbclient-devel-3.6.23-32.el6_5, samba-3.6.23-32.el6_5, samba-doc-3.6.23-32.el6_5 +4
- Red Hat Enterprise Linux Server Optional TUS (v. 6.6) libsmbclient-devel-3.6.23-32.el6_6, samba-doc-3.6.23-32.el6_6, samba-domainjoin-gui-3.6.23-32.el6_6 +3
- Red Hat Enterprise Linux Server Resilient Storage EUS (v. 7.2) ctdb-4.2.10-11.el7_2, ctdb-devel-4.2.10-11.el7_2, ctdb-tests-4.2.10-11.el7_2
- Red Hat Enterprise Linux Server TUS (v. 6.5) libsmbclient-3.6.23-32.el6_5, samba-3.6.23-32.el6_5, samba-client-3.6.23-32.el6_5 +3
- Red Hat Enterprise Linux Server TUS (v. 6.6) libsmbclient-3.6.23-32.el6_6, samba-3.6.23-32.el6_6, samba-client-3.6.23-32.el6_6 +3
Fixes 1 record
Priority CRITICAL 100KEV
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99448 · Published 2017-05-30 · Fixed CWE-94
