Oval Definition:oval:com.redhat.rhsa:def:20141009
Revision Date:2014-08-05Version:636
Title:RHSA-2014:1009: samba4 security update (Important)
Description:Samba is an open-source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

  • A heap-based buffer overflow flaw was found in Samba's NetBIOS message block daemon (nmbd). An attacker on the local network could use this flaw to send specially crafted packets that, when processed by nmbd, could possibly lead to arbitrary code execution with root privileges. (CVE-2014-3560)

    All Samba users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing this update, the smb service will be restarted automatically.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2014-0178
    CVE-2014-0244
    CVE-2014-3493
    CVE-2014-3560
    RHSA-2014:1009
    RHSA-2014:1009-01
    RHSA-2014:1009-02
    Platform(s):Red Hat Enterprise Linux 6
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • samba4 is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4 is signed with Red Hat redhatrelease2 key
  • samba4-client is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4-client is signed with Red Hat redhatrelease2 key
  • samba4-common is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4-common is signed with Red Hat redhatrelease2 key
  • samba4-dc is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4-dc is signed with Red Hat redhatrelease2 key
  • samba4-dc-libs is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4-dc-libs is signed with Red Hat redhatrelease2 key
  • samba4-devel is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4-devel is signed with Red Hat redhatrelease2 key
  • samba4-libs is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4-libs is signed with Red Hat redhatrelease2 key
  • samba4-pidl is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4-pidl is signed with Red Hat redhatrelease2 key
  • samba4-python is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4-python is signed with Red Hat redhatrelease2 key
  • samba4-swat is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4-swat is signed with Red Hat redhatrelease2 key
  • samba4-test is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4-test is signed with Red Hat redhatrelease2 key
  • samba4-winbind is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4-winbind is signed with Red Hat redhatrelease2 key
  • samba4-winbind-clients is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4-winbind-clients is signed with Red Hat redhatrelease2 key
  • samba4-winbind-krb5-locator is earlier than 0:4.0.0-63.el6_5.rc4
  • AND samba4-winbind-krb5-locator is signed with Red Hat redhatrelease2 key
  • BACK