samba4-4.0.0-68.AXS4.rc4
エラータID: AXSA:2016-139:02
リリース日:
2016/03/15 Tuesday - 22:48
題名:
samba4-4.0.0-68.AXS4.rc4
影響のあるチャネル:
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- smbd の SMB1 実装は、リモートの認証されたユーザに、まずシンボリックリンクを作成するために UNIX SMB1 コールを用い、そして、ACL コンテンツに書き込むために non-UNIX SMB1 コールを用いることによって、任意の ACL の変更を許してしまう脆弱性があります。(CVE-2015-7560)
一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2015-7560
The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
追加情報:
N/A
ダウンロード:
SRPMS
- samba4-4.0.0-68.AXS4.rc4.src.rpm
MD5: db71c1aa7af1073a977fd30a861569aa
SHA-256: 32b14870585ee3be703900bfe8d8fa47f1de59f776fb5aa5bef0cfcfa7c239bb
Size: 16.81 MB
Asianux Server 4 for x86
- samba4-4.0.0-68.AXS4.rc4.i686.rpm
MD5: 4fca09d2218fc4ce58ea82c6cb2a2176
SHA-256: a5e59f6ef34b923958ad70bdb1dc4e7245bafc0c1f3beee189ed19b449f2f334
Size: 359.96 kB - samba4-client-4.0.0-68.AXS4.rc4.i686.rpm
MD5: f3081193e3b44a5378c68fea310dc970
SHA-256: b4d5b8a3222040d5682abff0776036b17294e13114b178620db9ce847dde3948
Size: 437.46 kB - samba4-common-4.0.0-68.AXS4.rc4.i686.rpm
MD5: 9bcc4824f97cd38e4260985a3929967d
SHA-256: da46ff3a8fd05d0b3e814880892fad789383874164d511c7d72d2b45783accce
Size: 623.74 kB - samba4-dc-4.0.0-68.AXS4.rc4.i686.rpm
MD5: d4eef8663cbd5341723f7f7f3bef276e
SHA-256: af80502c5f829e28ab94a42ec2930bb229e39ccf56948c7fbab1abb04ba53ef5
Size: 13.41 kB - samba4-dc-libs-4.0.0-68.AXS4.rc4.i686.rpm
MD5: ab0b3caf72889d3b8dff23467f2fcb1a
SHA-256: fabe0dfac9836390fa2f21bec85ae0a0076521b5886ec2c7ebe64fedd6a6f120
Size: 13.45 kB - samba4-devel-4.0.0-68.AXS4.rc4.i686.rpm
MD5: 9d9db84345e1b2caa14945b128026dc3
SHA-256: 2bbe47a9256c69250c0fd90aab6d9529662e676d2d0e3290fde2618e419ca413
Size: 266.64 kB - samba4-libs-4.0.0-68.AXS4.rc4.i686.rpm
MD5: 9b7f34434a6f7d97d34472cfe5b94c57
SHA-256: 8e1c30104f34ed6d3264f11133bc27d6fd07774749da098aae9f5bb0c6759a89
Size: 4.05 MB - samba4-pidl-4.0.0-68.AXS4.rc4.i686.rpm
MD5: 3e5c39604509c30a3e0c6cc60565861a
SHA-256: 3b4afa9e8f8d512eacdec7c0516dcaeffa243da6fbe9aab290a746472a8667b9
Size: 109.04 kB - samba4-python-4.0.0-68.AXS4.rc4.i686.rpm
MD5: afff3496ac48f3333a8df6083d66314f
SHA-256: e59d7870f7d6f61226b87578dd3f2845c4d7cae43769e7ad057607cb3c9e1884
Size: 1.70 MB - samba4-swat-4.0.0-68.AXS4.rc4.i686.rpm
MD5: b708f49d6658b574cc9bd85898928a1d
SHA-256: f08d2fba380ee550a19843334fb9e465f7d9996dd0cae60707586ff1451ed859
Size: 73.51 kB - samba4-test-4.0.0-68.AXS4.rc4.i686.rpm
MD5: bea6fd2e9985cc095741e373698f42f4
SHA-256: d2637024e65d9da73dea6dbe854db22a6f40953dc343aa9ea395cd76c4b184b0
Size: 1.59 MB - samba4-winbind-4.0.0-68.AXS4.rc4.i686.rpm
MD5: b21e0515cd7546ed78a1307e7147b311
SHA-256: edc0139ab20a030959e044adc6b6539ce389a8ee9a43bdafb57fdef09cd69b7c
Size: 389.05 kB - samba4-winbind-clients-4.0.0-68.AXS4.rc4.i686.rpm
MD5: ea2f5e770d487e277336cf3caf32e1b6
SHA-256: ea055de041cd01712d75a7d220e738d78694e8f52b270de8dd043075ad5103ec
Size: 101.42 kB - samba4-winbind-krb5-locator-4.0.0-68.AXS4.rc4.i686.rpm
MD5: f2b17eb8a058e79483bfe10401eb6f26
SHA-256: c214a2a711c778a5e69fcfe93c3de77388652da897e70312c57d63d66b29f34f
Size: 17.88 kB
Asianux Server 4 for x86_64
- samba4-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: b4bfaebbf0dcd01e877fb641b87beb94
SHA-256: 50ad0e6c1514a7301dcb409268706abd43ce12ab7942f9cc968f8bef0c65bcf2
Size: 359.16 kB - samba4-client-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: 92e5910de38ea2f9a85f080d0804b630
SHA-256: 1633c997072ce29801f6e364cce8f416839df2823a39bc7b6309f58e7b3f21dc
Size: 421.25 kB - samba4-common-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: 97acbf42c32cde79cf69c0c79b9445dd
SHA-256: 5a611dea1bf666e0d64ca764f74b20c61368e2c8f75bfad2193194b67a951faa
Size: 611.61 kB - samba4-dc-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: 0b19a0c77f00bf3f4b4cc111ac819799
SHA-256: 4cb489ee7d00176eb407d1599ef5af0fffaf80c0129119b8b6c1407278a37f65
Size: 12.96 kB - samba4-dc-libs-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: 46fdd2cdcf4b19007d75760e63a29f54
SHA-256: 9ac48d595570652a2409078494ceae0f519ece09d0e53ba769a912cfa031f77b
Size: 13.00 kB - samba4-devel-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: ba9d1292d4db195a1434d595289127d2
SHA-256: 1319d34acdf503191ded8e6db64ce9a030281a620bc8567da82f5e8f01e7bebc
Size: 266.41 kB - samba4-libs-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: b6f5fc8693dbba7d343d71eb0ad52084
SHA-256: 245c764316112b25e37e63e3f88f97facfac004799f53c6c4e372ba21f9340ca
Size: 4.03 MB - samba4-pidl-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: 92c8486e78a8bb37f32f68bb79b4e2d6
SHA-256: 6d9e5b60ca3d29169649271e2f9346dadbee38f6d868dcabf8b6d83cac2ed907
Size: 108.59 kB - samba4-python-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: 821d782f8a0777dde6cbcfd0993e174f
SHA-256: a76fe69242558062d1c68243daa68f4c6d196fa3997db37045635a0fa1404050
Size: 1.75 MB - samba4-swat-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: b49daf0791978731a268dcc0b8e8f9ba
SHA-256: dd070b89ef00e6c7fc6e949a43fb96c7957f1a8483a1fc6f81b8d0df6d941b1a
Size: 72.57 kB - samba4-test-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: c0657a2930a0181722398deb8e95aa64
SHA-256: dd1a6ddf9970f79bada86c5f1ad36f0570eaed4a4546b19a198ad49a2f165f2d
Size: 1.50 MB - samba4-winbind-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: c56bd98bcd831f9fe3822ff3b103a1fa
SHA-256: 4fa4b7c8b4db59377b5664e97dddef5a2689503d61c4a3707aa33191a77a4e4b
Size: 378.36 kB - samba4-winbind-clients-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: 23490386a56cecc06480c6592bd6b497
SHA-256: 92fb963918a047a648d67622fd2d41e9bccd845d40e95cb85fd8a1f30bf11aff
Size: 101.93 kB - samba4-winbind-krb5-locator-4.0.0-68.AXS4.rc4.x86_64.rpm
MD5: 06c6daea5f24f83a9c09b832b2a14bf9
SHA-256: 2f6d088fc52d87ae0197da1d4584b93d992f22bd56cfb5bd9d8616ade7f14a5e
Size: 17.52 kB