Red Hat Security AdvisoryRHSA-2020:1084
samba security, bug fix, and enhancement update
Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libsmbclient-4.10.4-10.el7, libwbclient-4.10.4-10.el7, samba-4.10.4-10.el7 +10
- Red Hat Enterprise Linux Client Optional (v. 7) libsmbclient-devel-4.10.4-10.el7, libwbclient-devel-4.10.4-10.el7, samba-4.10.4-10.el7 +10
- Red Hat Enterprise Linux ComputeNode (v. 7) libsmbclient-4.10.4-10.el7, libwbclient-4.10.4-10.el7, samba-4.10.4-10.el7 +9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libsmbclient-devel-4.10.4-10.el7, libwbclient-devel-4.10.4-10.el7, samba-4.10.4-10.el7 +11
- Red Hat Enterprise Linux Server (v. 7) libsmbclient-4.10.4-10.el7, libsmbclient-4.10.4-10.el7.ppc, libwbclient-4.10.4-10.el7 +16
- Red Hat Enterprise Linux Server Optional (v. 7) libsmbclient-devel-4.10.4-10.el7, libsmbclient-devel-4.10.4-10.el7.ppc, libwbclient-devel-4.10.4-10.el7 +14
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) ctdb-4.10.4-10.el7, ctdb-tests-4.10.4-10.el7
- Red Hat Enterprise Linux Workstation (v. 7) libsmbclient-4.10.4-10.el7, libwbclient-4.10.4-10.el7, samba-4.10.4-10.el7 +11
- Red Hat Enterprise Linux Workstation Optional (v. 7) libsmbclient-devel-4.10.4-10.el7, libwbclient-devel-4.10.4-10.el7, samba-dc-4.10.4-10.el7 +8
Fixes 2 records
Priority MEDIUM 45
A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file.
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03182 · Published 2019-09-03 · Fixed CWE-22
Priority LOW 35
A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.03377 · Published 2019-11-06 · Partial fix CWE-22
