samba-4.2.10-7.el7

[修正内容]
以下項目について対処しました。

[Security Fix]
- Samba の libcli/smb/smbXcli_base.c には、(1) SMB2_SESSION_FLAG_IS_GUEST あるいは (2) SMB2_SESSION_FLAG_IS_NULL フラグを介して、中間者攻撃を行う攻撃者が、クライアント署名の保護メカニズムを回避し、SMB2 と SMB3 サーバになりすます脆弱性があります。 (CVE-2016-2119)

一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/

Fixed bugs:

* Previously, the "net" command in some cases failed to join the client to Active Directory (AD) because the permissions setting prevented modification of the supported Kerberos encryption type LDAP attribute. With this update, Samba has been fixed to allow joining an AD domain as a user. In addition, Samba now uses the machine account credentials to set up the Kerberos encryption types within AD for the joined machine. As a result, using "net" to join a domain now works more reliably.
* Previously, the idmap_hash module worked incorrectly when it was used together with other modules. As a consequence, user and group IDs were not mapped properly. A patch has been applied to skip already configured modules. Now, the hash module can be used as the default idmap configuration back end and IDs are resolved correctly.