samba-4.4.4-13.el7

エラータID: AXSA:2017-1654:02

Release date: 
Monday, May 22, 2017 - 17:30
Subject: 
samba-4.4.4-13.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

Samba is the standard Windows interoperability suite of programs for Linux and
Unix.

Security issues fixed with this release:

CVE-2016-2125
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-2126
** REJECT **

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or
individual who requested this candidate did not associate it with any
vulnerability during 2016. Notes: none.
CVE-2017-2619
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update packages.

CVEs: 
CVE-2016-2125
It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
CVE-2016-2126
Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.
CVE-2017-2619
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
Additional Info: 

N/A

Download: 

SRPMS
  1. samba-4.4.4-13.el7.src.rpm
    MD5: fc403ebe771a7d5750b666e942c266dc
    SHA-256: d18c44e8c76c0a8fdb5454a422e0390f375649fa0772e19dab283374001263a8
    Size: 13.97 MB

Asianux Server 7 for x86_64
  1. ctdb-4.4.4-13.el7.x86_64.rpm
    MD5: 8be480e82eba92ab2dacfd6815dadd65
    SHA-256: 5adc07baf47561de3915cf3ed411618116668512d670588130a0bd5223766499
    Size: 556.90 kB
  2. ctdb-tests-4.4.4-13.el7.x86_64.rpm
    MD5: 08c4c3c76c40fe40dd70aeddd838086a
    SHA-256: d3dd8870f6cb2489268fc0497af20258dc3564e6031b3bc9dbec9cd43ce4f849
    Size: 761.33 kB
  3. libsmbclient-4.4.4-13.el7.x86_64.rpm
    MD5: d8052f86dbaa2573f3cce8f06ad8f843
    SHA-256: 51a7b0f84f5f8ea569a134920593b4c499c59ed077b2f06a436f911adcecee9b
    Size: 124.87 kB
  4. libwbclient-4.4.4-13.el7.x86_64.rpm
    MD5: 6a4a13fdd70b253c5a5e65025bc3a20c
    SHA-256: 4541e41cfe5b1add2011c0fcfecd9843fe103b879717e3b9d61a909e3063ee0b
    Size: 99.28 kB
  5. samba-4.4.4-13.el7.x86_64.rpm
    MD5: 433b35424a507c39e72bd97850e5eb6d
    SHA-256: a1dbd2ef9daac300d5f61f3202296c788693017d07c7d127c8bb951c454e6d1f
    Size: 608.94 kB
  6. samba-client-4.4.4-13.el7.x86_64.rpm
    MD5: c72d0ca8fd9315d3d2ca6326cb927d09
    SHA-256: 0f7dfa9187105db509741d11aef2f158b4ea99dad2ebc497deda6944c60a6e7c
    Size: 546.09 kB
  7. samba-client-libs-4.4.4-13.el7.x86_64.rpm
    MD5: d2aecd0ef711b311dfa79e5786cabd33
    SHA-256: 5cc13268dee4d53cc6e9c90e9bd29ac55b114a7730dc5b5803dee8232cb13c1e
    Size: 4.60 MB
  8. samba-common-4.4.4-13.el7.noarch.rpm
    MD5: 1effa28c6ff79adc8b0a57261979a19d
    SHA-256: 1ed0e59642caef00e183d5b41c72787b8d2e5e99a6d2b2df1dd2aebeba5606d0
    Size: 189.86 kB
  9. samba-common-libs-4.4.4-13.el7.x86_64.rpm
    MD5: 2dbe40aa5b57ea2b7ca9b555de7f53c5
    SHA-256: 2839360d3c8ee85a3ef9d1e5a47913cbf9aa62f1de5e4a30a39957867c1cc197
    Size: 159.91 kB
  10. samba-common-tools-4.4.4-13.el7.x86_64.rpm
    MD5: 8ade108f70bcef3a4aa4d7b20158d237
    SHA-256: 50581f79e373240ad53bf7f150c1d296f476979ade82433fde07b923d4a244cf
    Size: 450.15 kB
  11. samba-libs-4.4.4-13.el7.x86_64.rpm
    MD5: efbc0f864f18a3775803ffc641f74265
    SHA-256: 85d14f87e7b6de51a311a13445d94f275d970693e2a5e226209df752c7ea9bc5
    Size: 259.46 kB
  12. samba-python-4.4.4-13.el7.x86_64.rpm
    MD5: e41318487526e6259946bc1de2ca3035
    SHA-256: 582b432a9cb50f3fa90d272563b69e2850071c04e8ab6ac0cce6dd275e78981d
    Size: 1.98 MB
  13. samba-winbind-4.4.4-13.el7.x86_64.rpm
    MD5: c1f3edd930588ffeb26653763e9fc5da
    SHA-256: 2c730332a4c1eabb4f86470d489fa182dc1e98bca8a0cbc44deb36a3c6b21529
    Size: 484.08 kB
  14. samba-winbind-clients-4.4.4-13.el7.x86_64.rpm
    MD5: f46bc05415ea1991eb78bb9b102de9b3
    SHA-256: 70b93c1203c4c78a63ea5a0ca40267f9f5bac0bebec52d3c96383758318d557e
    Size: 123.23 kB
  15. samba-winbind-modules-4.4.4-13.el7.x86_64.rpm
    MD5: fe5168b2df485f2e97cd6b4f01f3a713
    SHA-256: 6826e203f3a176729a0d0b82f108bd742173553381b086beb4fe10f386ba27f5
    Size: 107.63 kB
  16. libsmbclient-4.4.4-13.el7.i686.rpm
    MD5: 1c786a823dd98d1dcbdf91b4d2ed863f
    SHA-256: 321fbe271cfc4f600bc185806e6ad0f3f8568a831011d0095296e1f198386546
    Size: 125.12 kB
  17. libwbclient-4.4.4-13.el7.i686.rpm
    MD5: ddd92288d497ebee5df129c63d2a229f
    SHA-256: b9827c051903e2f66a6f62a5294d6015e87ad34d1f0545455818773f2fc40fd7
    Size: 99.94 kB
  18. samba-client-libs-4.4.4-13.el7.i686.rpm
    MD5: 4b245bab622ca041091a3ab946b389cd
    SHA-256: 9a4bbbb3b6c8abc2bdb9f19d2af88690a40d389bd1a9136c682ed4520d242f21
    Size: 4.61 MB
  19. samba-libs-4.4.4-13.el7.i686.rpm
    MD5: 514bfa6df147aa444f5e1ef617035607
    SHA-256: 12cdb6f5e0d6ae7d829f111797f35b63e4f3292ec8ceb49d4a0002e7bae324dc
    Size: 262.75 kB
  20. samba-winbind-modules-4.4.4-13.el7.i686.rpm
    MD5: 56b26fa6df2ebaeeeb8770b0ba8198b2
    SHA-256: 045de6e90d42fa0449587ae0a3ae66f0f675d2881802ddd6415d3f46839063c7
    Size: 107.73 kB