(RHSA-2016:0448) Moderate: samba security update

2016-03-1512:23:23

access.redhat.com

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

63.9%

JSON

Samba is an open-source implementation of the Server Message Block (SMB) or
Common Internet File System (CIFS) protocol, which allows PC-compatible
machines to share files, printers, and other information.

A flaw was found in the way Samba handled ACLs on symbolic links.
An authenticated user could use this flaw to gain access to an arbitrary
file or directory by overwriting its ACL. (CVE-2015-7560)

Red Hat would like to thank the Samba project for reporting this issue.
Upstream acknowledges Jeremy Allison (Google) and the Samba team as the
original reporters.

All samba users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing this
update, the smb service will be restarted automatically.

OSVersionArchitecturePackageVersionFilename
RedHat7s390xsamba-common-tools< 4.2.3-12.el7_2samba-common-tools-4.2.3-12.el7_2.s390x.rpm
RedHat6ppc64samba-winbind-krb5-locator< 3.6.23-25.el6_7samba-winbind-krb5-locator-3.6.23-25.el6_7.ppc64.rpm
RedHat7i686samba-client-libs< 4.2.3-12.el7_2samba-client-libs-4.2.3-12.el7_2.i686.rpm
RedHat7i686samba-winbind-modules< 4.2.3-12.el7_2samba-winbind-modules-4.2.3-12.el7_2.i686.rpm
RedHat6x86_64samba-doc< 3.6.23-25.el6_7samba-doc-3.6.23-25.el6_7.x86_64.rpm
RedHat7ppc64samba< 4.2.3-12.el7_2samba-4.2.3-12.el7_2.ppc64.rpm
RedHat7s390libsmbclient-devel< 4.2.3-12.el7_2libsmbclient-devel-4.2.3-12.el7_2.s390.rpm
RedHat7ppc64samba-winbind-krb5-locator< 4.2.3-12.el7_2samba-winbind-krb5-locator-4.2.3-12.el7_2.ppc64.rpm
RedHat7ppc64lelibsmbclient-devel< 4.2.3-12.el7_2libsmbclient-devel-4.2.3-12.el7_2.ppc64le.rpm
RedHat7s390xsamba-winbind-krb5-locator< 4.2.3-12.el7_2samba-winbind-krb5-locator-4.2.3-12.el7_2.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	s390x	samba-common-tools	< 4.2.3-12.el7_2	samba-common-tools-4.2.3-12.el7_2.s390x.rpm
RedHat	6	ppc64	samba-winbind-krb5-locator	< 3.6.23-25.el6_7	samba-winbind-krb5-locator-3.6.23-25.el6_7.ppc64.rpm
RedHat	7	i686	samba-client-libs	< 4.2.3-12.el7_2	samba-client-libs-4.2.3-12.el7_2.i686.rpm
RedHat	7	i686	samba-winbind-modules	< 4.2.3-12.el7_2	samba-winbind-modules-4.2.3-12.el7_2.i686.rpm
RedHat	6	x86_64	samba-doc	< 3.6.23-25.el6_7	samba-doc-3.6.23-25.el6_7.x86_64.rpm
RedHat	7	ppc64	samba	< 4.2.3-12.el7_2	samba-4.2.3-12.el7_2.ppc64.rpm
RedHat	7	s390	libsmbclient-devel	< 4.2.3-12.el7_2	libsmbclient-devel-4.2.3-12.el7_2.s390.rpm
RedHat	7	ppc64	samba-winbind-krb5-locator	< 4.2.3-12.el7_2	samba-winbind-krb5-locator-4.2.3-12.el7_2.ppc64.rpm
RedHat	7	ppc64le	libsmbclient-devel	< 4.2.3-12.el7_2	libsmbclient-devel-4.2.3-12.el7_2.ppc64le.rpm
RedHat	7	s390x	samba-winbind-krb5-locator	< 4.2.3-12.el7_2	samba-winbind-krb5-locator-4.2.3-12.el7_2.s390x.rpm