Synopsis

Moderate: samba security update

Type/Severity

Security Advisory: Moderate

Topic

An update for samba is now available for Red Hat Gluster Storage 3.1 for RHEL 6 and Red Hat Gluster Storage 3.1 for RHEL 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

• A flaw was found in the way Samba initiated signed DCE/RPC connections. A man-in-the-middle attacker could use this flaw to downgrade the connection to not use signing and therefore impersonate the server. (CVE-2016-2119)
  

Red Hat would like to thank the Samba project for reporting this issue. Upstream acknowledges Stefan Metzmacher as the original reporter.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the smb service will be restarted automatically.

Affected Products

• Red Hat Gluster Storage Server for On-premise 3 for RHEL 7 x86_64
• Red Hat Gluster Storage Server for On-premise 3 for RHEL 6 x86_64

Fixes

• BZ - 1351955 - CVE-2016-2119 samba: Client side SMB2/3 required signing can be downgraded

CVEs

• CVE-2016-2119

References

• http://www.redhat.com/security/updates/classification/#normal

Red Hat Gluster Storage Server for On-premise 3 for RHEL 7

SRPM
samba-4.4.3-8.el7rhgs.src.rpm	SHA-256: 93c28a629a2ff2e1f92925d2b72529982c009fd1f7ca7a06d2fc0cfdb5e87ab8
x86_64
ctdb-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 88779f950548b6d13ae0e8a7f58f575578cccb5a49ae441248dfa11e7cecc612
ctdb-tests-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: d322fb4995e9c5edbb6105689eef735985adb64e97c509888c1b5e30a396dfd7
libsmbclient-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 64fa42bd9fbc3e0b21b9def1c753b7d2a2273db877e56015171297a29f045a27
libsmbclient-devel-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 81fda0387cdb47dbb4c655a5698085c9abd932a7f46768da3f40158cd3d46c39
libwbclient-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 720706785ea582a8bb2e3ba6af7b2d21cd069609414d51d2d2a282bed2b46c66
libwbclient-devel-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: f2652619967b7ca17e4e2c1f4fdf836b74d0cb40eaceab64ce09ad7518c3b3ed
samba-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 53242dbe2ebcf3582cecd7cd687dba55c403ac95bccaf6936b6bb657cb013b29
samba-client-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: f4db24881828bc3d903a9a90bb15dfc590f8f358e62d014be50f5f55fee9c7a4
samba-client-libs-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: a46d32c00850bf980cea3ccc85305b5c91e99bfa688eacbc67f395bd09921b13
samba-common-4.4.3-8.el7rhgs.noarch.rpm	SHA-256: a0bd038d63452afc73db9f680b5ca662ace3ee3c6082eaae5169720f5a18d4a1
samba-common-libs-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 08fa9e2e4b238baa5841f1a144ff71276badc4e9094b914ba85d5b9c835b056d
samba-common-tools-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 643710ca83a149eb9508acb185fee4d15c31fb35ddcb429dbbc264a74a257e59
samba-dc-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 6fef57375e2ea929cd19a5fb6b2708948a2d2effa6d90f71c370096a5b5385dc
samba-dc-libs-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 6b3baec0b12276f72bb15b48d1a2c93febd61e78210914463ad0ecc401537da8
samba-debuginfo-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: e2b6790259d2cdf5e1e5c553ebd9fc0aa7acf015c8b11bdad56514468f661bbc
samba-devel-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 43f32efeebc65e901d926d05694451a664e5861e3888497db81801149fcd6bf8
samba-libs-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 7bb88d3141dbd6d5ca021e7db9e34510a58e684530564d5a87e5a6e5492e50e4
samba-pidl-4.4.3-8.el7rhgs.noarch.rpm	SHA-256: 075c0dadc06c628574748c96e491ee31c9915b9a87dd9c317b1711fbedd59e4b
samba-python-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: dafb73b727aa661d3cf1e7e98f2ff6417b5e690e6b9fabbd8f79865e436a2302
samba-test-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: d370f67c8cd95b09c1a33c65d1294828b4647c188404f228927337e548af94d5
samba-test-libs-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: d77dd5ab8db22d9c04cba78446233e0cc171cb3a36aa45f583cd7aad332821c4
samba-vfs-glusterfs-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 8b8f98eb57fe566cbaf7ebaed9f60d6add7b4ef285021be7e1d634156d40d49b
samba-winbind-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 5be8b6faa94bfa7d99ed83993f7b362ca499b387e10af564b7d6d44a036ae27f
samba-winbind-clients-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 4d2715e005799365ccd978eb670b72490517cc51363f502fb5694d9f5f647c86
samba-winbind-krb5-locator-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 2d27a846881bcd49b4916dbf079fc3ccffb6377e98902ef4557dba400e84a1e8
samba-winbind-modules-4.4.3-8.el7rhgs.x86_64.rpm	SHA-256: 2bcb33b9716966df74aa178d8ab726782f6db81e40e42ce3f49ec1ac71f8acee

Red Hat Gluster Storage Server for On-premise 3 for RHEL 6

SRPM
samba-4.4.3-8.el6rhs.src.rpm	SHA-256: 013d758548ae2aecdae882fcf275a462b9607be70e1b9dbbf6d5cf7d20e09498
x86_64
ctdb-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: 1190c96249b75e7c2ebb647a12bcf9b660062bc80b25ecea99e573d211e71cb7
ctdb-tests-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: ca060b5814a54cd59f5c1e374f93b4e2fcad333ac3577471422b7191a2dece2b
libsmbclient-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: 56186c4ccb86e9169226e83bd2872ab2e3f823226bf9cc0487b03891ee3ac452
libsmbclient-devel-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: 38d67e1f0a63f10062fa4c006b9e79fa0ca1cc705e30b1ff5218dd6eccb54d96
libwbclient-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: 474cfaacc5d34f4595d5411b82e388375338e870589233bfd85a2046a5393457
libwbclient-devel-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: 214a49ab034a7ac2db7daa699e2299c6d0122b83d15f6b623161be9fae6196ba
samba-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: d8f41c9df1497e1bde0de35660ffc99e7ef3ae8d8d1189b3bef88e147697f9dc
samba-client-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: 9124786ef5bfb68eaf37e000392b5f8b3308b0246ca4bc55575b14ca91d5c708
samba-client-libs-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: a376d7617957e6cb9174693ae68a625b5155bcb763bcd110294d095e341d93e7
samba-common-4.4.3-8.el6rhs.noarch.rpm	SHA-256: e34acb455ed8ead842b6f5b32b8909aad18b632c027d7aa75dbe0a3be7c1ded2
samba-common-libs-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: 8e7f41efe4588b80e9868f88b48a8a91a83582d8e7e114ce6bc68a81a5a99b57
samba-common-tools-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: 900e5ed0f20252ff31f1aaf269d30ecf88b2322845a59ef26ed42ba84f075856
samba-dc-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: e7797b9435799d7911bb7fcb20960fd6b2ac6d552b8dd123edfdad65af895350
samba-dc-libs-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: c616f63603cd1c6996d1b79ca0188ede27c38680431d6fac39f4d943e1aebd56
samba-debuginfo-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: 4c5e4c71cf7c9331320186912dfd1ad67eaee8acb62228ef3b95d049499c578c
samba-devel-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: a0671a873a8671ca1f369299788fa042cf148fb94f6ce15287286696b0855cbc
samba-libs-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: a4a9e255cf9d1800bf95756d5c8df7c57f466b9ef98f36f2a8260a977a17719a
samba-pidl-4.4.3-8.el6rhs.noarch.rpm	SHA-256: 0e4b8255974b61203f7cf02ea594751e35d7e88c110efe9af3dd49305d001274
samba-python-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: 570a138f870fffd9061ecc425a5a7c0eb43a67e81efeb824c428db9963f2e009
samba-test-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: 14adb14f820df259333fedf4edc32127896cd85f9c0c49bf8573ff412841f890
samba-test-libs-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: d9640f51f3d6c8d314a425d5ffea34d0a6d810ae926a3558c2b47486dd1555d2
samba-vfs-glusterfs-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: f6aba9bceab0a5db8c636e7d762f8e7075a00c785462f48376fc7231c098e6d0
samba-winbind-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: a44943a737e3f28b03d84bba576d69efe3705a1f86542ce93b2c4cc48a666879
samba-winbind-clients-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: ffa2d89247ad1120992149797c4a9a8fa27482646019d6f29ccb9e025b7d1300
samba-winbind-krb5-locator-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: 663bdf96074091ef1e018efe283eccec270b3b09b45d20fb5aec760dda1db166
samba-winbind-modules-4.4.3-8.el6rhs.x86_64.rpm	SHA-256: 0f10e6554946deee7c9128a6cfb675172ec9fe33fdacb781649b1c748a63fd7f