Synopsis

Important: samba security update

Type/Severity

Security Advisory: Important

Topic

An update for samba is now available for Red Hat Gluster Storage 3.2 for RHEL 6 and Red Hat Gluster Storage 3.2 for RHEL 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

• A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root. (CVE-2017-7494)
  

Red Hat would like to thank the Samba project for reporting this issue. Upstream acknowledges steelo as the original reporter.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the smb service will be restarted automatically.

Affected Products

• Red Hat Gluster Storage Server for On-premise 3 for RHEL 7 x86_64
• Red Hat Gluster Storage Server for On-premise 3 for RHEL 6 x86_64

Fixes

• BZ - 1450347 - CVE-2017-7494 samba: Loading shared modules from any path in the system leading to RCE

CVEs

• CVE-2017-7494

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Gluster Storage Server for On-premise 3 for RHEL 7

SRPM
samba-4.4.6-5.el7rhgs.src.rpm	SHA-256: 5a9e330bfbad4fa2874b4c3f7414c19b2809f6f421a1cd98bfe8688faea8bf1b
x86_64
ctdb-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 051cca6c18cc0aa13344dea40ab824784b9b36a13c3f1e51d9de57e501a52ecf
ctdb-tests-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: f7e98defe99d81f86dbbbad287d85f8bbb7dbd674706828124dabf92031d7172
libsmbclient-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 23afa12049140099f578e12cb024142535808ddd7aacf497ffa929e3484f85c5
libsmbclient-devel-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 5ce90cd4be3bb139b36e6c3050ff0d4d7292a72df39fc86fd5fcc48c407fab45
libwbclient-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: c32a042a736e636b50cdfc5cdf5511df575fa05ca360e724faa082e7a6ea21b7
libwbclient-devel-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 3952396fb89b513913a754e3ec926b8ba236e1451123bfb0ed28ca1f687c2f93
samba-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: dc4cf73f01cd73f77a715b91b3411eb14be744c5241ead689baf1fd29b091b95
samba-client-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: b9628201ee685ddc9ec388c87b6c36197710d7a84a4e8dac08bf20881d93a34d
samba-client-libs-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 2a9b07548e69864659f7462172a662db5361eed30eafad7ecff09c4b16d90bbc
samba-common-4.4.6-5.el7rhgs.noarch.rpm	SHA-256: d571c3e7bd6b99066aa5aa5c2ff635c00f559889ca856106d3e059e1af7739f6
samba-common-libs-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 608a097a5abc0eed643e88bed695e5ecb383361e047af65194e8664f0c659e6f
samba-common-tools-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 8c592be33650b6043f76551bc151931b338d055ec6b27f55f05d96e05af4895d
samba-dc-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: aab540a16dd459b6ab4c499ca7300dc45b325b063b544492a08797b9704316bd
samba-dc-libs-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 36efe6195b9313383b2874ea437cd7b4b9280568d0ef61267ef8be269be645d8
samba-debuginfo-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 3c0a5c22caad9d01cf992903ce8ac90780eef32e99e8583f769eb736f4da5cbe
samba-devel-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: cf20527f7d875582a95109411f5a9284fd86930f47bf0630a19f056ae8f47c7a
samba-krb5-printing-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: e54ba3b2839e72366ad14dcd8595380f2d1d85df6709c782b45752cfc47dd1a0
samba-libs-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 914e24845ac7152afb030fc9c59057322953dca9c8f5590d41845f7a4be5d0c8
samba-pidl-4.4.6-5.el7rhgs.noarch.rpm	SHA-256: 13b4748da3335d66aa02938e5419d90880ce230631f40898306a8bffda73634f
samba-python-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 44a664a4ff5730f5fdb5d2c7aac3035dc743a08ace1f04c3e8b2f6bb5cad24f1
samba-test-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: ce6215bc58c576f8d095782517c8c3b2886d5d3e43d24f668ffc3008fbc5ed98
samba-test-libs-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 8a166febd688214ffe3915d29ab1cfff19f84310aa3ec06c84a702e4cad8552f
samba-vfs-glusterfs-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 40a62d97acb7698909472b62c6d0c6e6333482652cb577a40e2895f1f8c3b11d
samba-winbind-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 518c04bf0f273fc9a7e58ac167fc88b35864a451c03dfaa7620561e5ca67a4ff
samba-winbind-clients-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 5eab94e182bb5f33637ed96586fe4a2c65e7f8e9507c79b6975f8998d41d8b07
samba-winbind-krb5-locator-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 70e10138eff4ab0b093d8199ac763bba67100bac5225f629a9b546e386bbf6d1
samba-winbind-modules-4.4.6-5.el7rhgs.x86_64.rpm	SHA-256: 1e2404ca46959f0369c9e86bec2dbb5b99d860c91ed0a9f6044f460ac9a91b67

Red Hat Gluster Storage Server for On-premise 3 for RHEL 6

SRPM
samba-4.4.6-5.el6rhs.src.rpm	SHA-256: f94a8e5125743750fd4a3f9e463b8d5ee8dc5103a6e65c102c1ad7b9f751df3a
x86_64
ctdb-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 152e8dbf28fa5ccb42366049fc1cc6db4dfd04c25665691f752dc6e2305c272a
ctdb-tests-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 18abbf03a8c85623126f20f871b60fb8f6d21981071c803a3f31f03938337c23
libsmbclient-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 26062becf98e4dc4f6054117518042e46ad9cb4cb68899240890edeb10cf9d59
libsmbclient-devel-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 69522a2cd3dcf8c7661b8ebe14f60dd6dbc6a45000ffd9727c7a06f02bff7760
libwbclient-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 51c5e1737f3ae802ed1098a3221e3aceefe29a03f5c6d1bdf03fc69654f48efd
libwbclient-devel-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: fc0f8fbcf82c79b7ec80f0e44ed1c62b9a7d63ff9771886097a6cc518b93c797
samba-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: a936bbb4d5539e80df1bf6c9785ff64844fce67663671300f40c08cc4352365f
samba-client-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 3cc2a452c8f0fc09cbc0ad113bd5d452b19de6068870644dbf3e9d493a6e9346
samba-client-libs-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: ff76505c56a9fb9ae82281b9e011e63fe6b6ae4b998268eaf8743ab5b37ca564
samba-common-4.4.6-5.el6rhs.noarch.rpm	SHA-256: 934216c7e6e5548dc8eddc60803b2a2dcae54b27d47ab184fa5ea62a08febc20
samba-common-libs-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: a680188b9d06e33c5e7c33544b794b325b44b19e3b8345e13911daba4019f1c1
samba-common-tools-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 7cf2342b54623c3e7712f8abdf4fdf724e53ce6efb8c9adce54085188f812ef5
samba-dc-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 3a067d8ce7804e2a905c00c29cec921652af96ff3e65e9220fba8f4e1c87e2e6
samba-dc-libs-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: cbf3673eaa16c853e7896b385f7d6e0bf4787922271c5b2d7b68d5c7cd18a122
samba-debuginfo-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 0b55de031efe906b5be17949be8bffc1529b6acaca48a71b09acd9e5273f17e9
samba-devel-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 96b4ef17bc64f7bc79a28178dedaaf8daf12139ed571d3166dfb752a5cc02cba
samba-krb5-printing-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 9c45c8cf59739aaf3b9acae8a1c9e0dfb40f524da05f3afdcbe822c882a28bdc
samba-libs-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: d035545313526ec1ffcaf8fd8b24954cea670c717d483d28bf7e5104fcb96528
samba-pidl-4.4.6-5.el6rhs.noarch.rpm	SHA-256: b3d3f5fd4e4bd0c73fbe39d617683b1fbe13a6a934a1a04d3b988853a801f6fe
samba-python-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 36a60a4440f98bbb74742d854f413008fc07d83c3999337e3ff925c5284f7748
samba-test-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 492c6b19e2e035cc50ca2a8875b54b9f51464cd4d2c3c04082768e68741a015d
samba-test-libs-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 85b438154b022f2241c34483c5bb99baf464b71c10e166dbff250c455f0a53d8
samba-vfs-glusterfs-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 35acd8bfc918b12e78af331235fd5a05e0d94ec68abf7e8cfb51ad1a3fc68adb
samba-winbind-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: b3d77c8b6459fcf32aaff48a02671ab2feb0b723bd835e4ea71744e9424401ad
samba-winbind-clients-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: b0849d746c5173c5ab7f7b2487c77a5285a9cdf60dc4ebbba349f91d7c253a2e
samba-winbind-krb5-locator-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: 64d62dc0fdba92c3266d27d41e2eb99c2aed90cab6c43ade3713a40d606bb97a
samba-winbind-modules-4.4.6-5.el6rhs.x86_64.rpm	SHA-256: c23ca860c0533ffd6fe1e1d693f54859f08d63fb958519bfd281c89e13087255