Issued:

2017-11-29

Updated:

2017-11-29

RHSA-2017:3278 - Important: samba4 security update

Synopsis

Important: samba4 security update

Type/Severity

Security Advisory Important

Topic

An update for samba4 is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Samba is an open-source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

Security Fix(es):

• A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An unauthenticated attacker could send specially-crafted SMB1 requests to cause the server to crash or execute arbitrary code. (CVE-2017-14746)

• A memory disclosure flaw was found in samba. An attacker could retrieve parts of server memory, which could contain potentially sensitive data, by sending specially-crafted requests to the samba server. (CVE-2017-15275)

Red Hat would like to thank the Samba project for reporting these issues. Upstream acknowledges Yihan Lian and Zhibin Hu (Qihoo 360 GearTeam) as the original reporter of CVE-2017-14746; and Volker Lendecke (SerNet and the Samba Team) as the original reporter of CVE-2017-15275.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the smb service will be restarted automatically.

Affected Products

Updated Packages

• samba4-test-4.2.10-12.el6_9.i686.rpm
• samba4-common-4.2.10-12.el6_9.x86_64.rpm
• samba4-python-4.2.10-12.el6_9.x86_64.rpm
• samba4-dc-4.2.10-12.el6_9.i686.rpm
• samba4-winbind-4.2.10-12.el6_9.x86_64.rpm
• samba4-debuginfo-4.2.10-12.el6_9.x86_64.rpm
• samba4-dc-libs-4.2.10-12.el6_9.ppc64.rpm
• samba4-client-4.2.10-12.el6_9.i686.rpm
• samba4-winbind-clients-4.2.10-12.el6_9.ppc64.rpm
• samba4-pidl-4.2.10-12.el6_9.i686.rpm
• samba4-dc-4.2.10-12.el6_9.ppc64.rpm
• samba4-pidl-4.2.10-12.el6_9.s390x.rpm
• samba4-devel-4.2.10-12.el6_9.i686.rpm
• samba4-devel-4.2.10-12.el6_9.ppc64.rpm
• samba4-client-4.2.10-12.el6_9.ppc64.rpm
• samba4-4.2.10-12.el6_9.src.rpm
• samba4-devel-4.2.10-12.el6_9.s390x.rpm
• samba4-4.2.10-12.el6_9.ppc64.rpm
• samba4-client-4.2.10-12.el6_9.s390x.rpm
• samba4-4.2.10-12.el6_9.x86_64.rpm
• samba4-libs-4.2.10-12.el6_9.ppc64.rpm
• samba4-common-4.2.10-12.el6_9.s390x.rpm
• samba4-test-4.2.10-12.el6_9.s390x.rpm
• samba4-common-4.2.10-12.el6_9.i686.rpm
• samba4-winbind-4.2.10-12.el6_9.ppc64.rpm
• samba4-4.2.10-12.el6_9.s390x.rpm
• samba4-winbind-krb5-locator-4.2.10-12.el6_9.s390x.rpm
• samba4-libs-4.2.10-12.el6_9.x86_64.rpm
• samba4-pidl-4.2.10-12.el6_9.x86_64.rpm
• samba4-test-4.2.10-12.el6_9.x86_64.rpm
• samba4-winbind-clients-4.2.10-12.el6_9.i686.rpm
• samba4-winbind-clients-4.2.10-12.el6_9.x86_64.rpm
• samba4-client-4.2.10-12.el6_9.x86_64.rpm
• samba4-dc-libs-4.2.10-12.el6_9.s390x.rpm
• samba4-4.2.10-12.el6_9.i686.rpm
• samba4-winbind-krb5-locator-4.2.10-12.el6_9.i686.rpm
• samba4-dc-libs-4.2.10-12.el6_9.i686.rpm
• samba4-winbind-krb5-locator-4.2.10-12.el6_9.x86_64.rpm
• samba4-winbind-4.2.10-12.el6_9.s390x.rpm
• samba4-python-4.2.10-12.el6_9.s390x.rpm
• samba4-dc-libs-4.2.10-12.el6_9.x86_64.rpm
• samba4-debuginfo-4.2.10-12.el6_9.i686.rpm
• samba4-dc-4.2.10-12.el6_9.x86_64.rpm
• samba4-devel-4.2.10-12.el6_9.x86_64.rpm
• samba4-python-4.2.10-12.el6_9.i686.rpm
• samba4-libs-4.2.10-12.el6_9.s390x.rpm
• samba4-winbind-krb5-locator-4.2.10-12.el6_9.ppc64.rpm
• samba4-dc-4.2.10-12.el6_9.s390x.rpm
• samba4-common-4.2.10-12.el6_9.ppc64.rpm
• samba4-libs-4.2.10-12.el6_9.i686.rpm
• samba4-python-4.2.10-12.el6_9.ppc64.rpm
• samba4-test-4.2.10-12.el6_9.ppc64.rpm
• samba4-pidl-4.2.10-12.el6_9.ppc64.rpm
• samba4-winbind-clients-4.2.10-12.el6_9.s390x.rpm
• samba4-winbind-4.2.10-12.el6_9.i686.rpm
• samba4-debuginfo-4.2.10-12.el6_9.s390x.rpm
• samba4-debuginfo-4.2.10-12.el6_9.ppc64.rpm

Fixes

• This content is not included.BZ - 1511899
• This content is not included.BZ - 1512465

CVEs

• CVE-2017-14746
• CVE-2017-15275

References

• https://access.redhat.com/security/updates/classification/#important

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.