Oval Definition:oval:com.redhat.rhsa:def:20160448
Revision Date:2016-03-15Version:640
Title:RHSA-2016:0448: samba security update (Moderate)
Description:Samba is an open-source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information.

  • A flaw was found in the way Samba handled ACLs on symbolic links. An authenticated user could use this flaw to gain access to an arbitrary file or directory by overwriting its ACL. (CVE-2015-7560)

    Red Hat would like to thank the Samba project for reporting this issue. Upstream acknowledges Jeremy Allison (Google) and the Samba team as the original reporters.

    All samba users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing this update, the smb service will be restarted automatically.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2015-7560
    RHSA-2016:0448
    RHSA-2016:0448-00
    RHSA-2016:0448-03
    Platform(s):Red Hat Enterprise Linux 6
    Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • libsmbclient is earlier than 0:3.6.23-25.el6_7
  • AND libsmbclient is signed with Red Hat redhatrelease2 key
  • libsmbclient-devel is earlier than 0:3.6.23-25.el6_7
  • AND libsmbclient-devel is signed with Red Hat redhatrelease2 key
  • samba is earlier than 0:3.6.23-25.el6_7
  • AND samba is signed with Red Hat redhatrelease2 key
  • samba-client is earlier than 0:3.6.23-25.el6_7
  • AND samba-client is signed with Red Hat redhatrelease2 key
  • samba-common is earlier than 0:3.6.23-25.el6_7
  • AND samba-common is signed with Red Hat redhatrelease2 key
  • samba-doc is earlier than 0:3.6.23-25.el6_7
  • AND samba-doc is signed with Red Hat redhatrelease2 key
  • samba-domainjoin-gui is earlier than 0:3.6.23-25.el6_7
  • AND samba-domainjoin-gui is signed with Red Hat redhatrelease2 key
  • samba-glusterfs is earlier than 0:3.6.23-25.el6_7
  • AND samba-glusterfs is signed with Red Hat redhatrelease2 key
  • samba-swat is earlier than 0:3.6.23-25.el6_7
  • AND samba-swat is signed with Red Hat redhatrelease2 key
  • samba-winbind is earlier than 0:3.6.23-25.el6_7
  • AND samba-winbind is signed with Red Hat redhatrelease2 key
  • samba-winbind-clients is earlier than 0:3.6.23-25.el6_7
  • AND samba-winbind-clients is signed with Red Hat redhatrelease2 key
  • samba-winbind-devel is earlier than 0:3.6.23-25.el6_7
  • AND samba-winbind-devel is signed with Red Hat redhatrelease2 key
  • samba-winbind-krb5-locator is earlier than 0:3.6.23-25.el6_7
  • AND samba-winbind-krb5-locator is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • ctdb is earlier than 0:4.2.3-12.el7_2
  • AND ctdb is signed with Red Hat redhatrelease2 key
  • ctdb-devel is earlier than 0:4.2.3-12.el7_2
  • AND ctdb-devel is signed with Red Hat redhatrelease2 key
  • ctdb-tests is earlier than 0:4.2.3-12.el7_2
  • AND ctdb-tests is signed with Red Hat redhatrelease2 key
  • libsmbclient is earlier than 0:4.2.3-12.el7_2
  • AND libsmbclient is signed with Red Hat redhatrelease2 key
  • libsmbclient-devel is earlier than 0:4.2.3-12.el7_2
  • AND libsmbclient-devel is signed with Red Hat redhatrelease2 key
  • libwbclient is earlier than 0:4.2.3-12.el7_2
  • AND libwbclient is signed with Red Hat redhatrelease2 key
  • libwbclient-devel is earlier than 0:4.2.3-12.el7_2
  • AND libwbclient-devel is signed with Red Hat redhatrelease2 key
  • samba is earlier than 0:4.2.3-12.el7_2
  • AND samba is signed with Red Hat redhatrelease2 key
  • samba-client is earlier than 0:4.2.3-12.el7_2
  • AND samba-client is signed with Red Hat redhatrelease2 key
  • samba-client-libs is earlier than 0:4.2.3-12.el7_2
  • AND samba-client-libs is signed with Red Hat redhatrelease2 key
  • samba-common is earlier than 0:4.2.3-12.el7_2
  • AND samba-common is signed with Red Hat redhatrelease2 key
  • samba-common-libs is earlier than 0:4.2.3-12.el7_2
  • AND samba-common-libs is signed with Red Hat redhatrelease2 key
  • samba-common-tools is earlier than 0:4.2.3-12.el7_2
  • AND samba-common-tools is signed with Red Hat redhatrelease2 key
  • samba-dc is earlier than 0:4.2.3-12.el7_2
  • AND samba-dc is signed with Red Hat redhatrelease2 key
  • samba-dc-libs is earlier than 0:4.2.3-12.el7_2
  • AND samba-dc-libs is signed with Red Hat redhatrelease2 key
  • samba-devel is earlier than 0:4.2.3-12.el7_2
  • AND samba-devel is signed with Red Hat redhatrelease2 key
  • samba-libs is earlier than 0:4.2.3-12.el7_2
  • AND samba-libs is signed with Red Hat redhatrelease2 key
  • samba-pidl is earlier than 0:4.2.3-12.el7_2
  • AND samba-pidl is signed with Red Hat redhatrelease2 key
  • samba-python is earlier than 0:4.2.3-12.el7_2
  • AND samba-python is signed with Red Hat redhatrelease2 key
  • samba-test is earlier than 0:4.2.3-12.el7_2
  • AND samba-test is signed with Red Hat redhatrelease2 key
  • samba-test-devel is earlier than 0:4.2.3-12.el7_2
  • AND samba-test-devel is signed with Red Hat redhatrelease2 key
  • samba-test-libs is earlier than 0:4.2.3-12.el7_2
  • AND samba-test-libs is signed with Red Hat redhatrelease2 key
  • samba-vfs-glusterfs is earlier than 0:4.2.3-12.el7_2
  • AND samba-vfs-glusterfs is signed with Red Hat redhatrelease2 key
  • samba-winbind is earlier than 0:4.2.3-12.el7_2
  • AND samba-winbind is signed with Red Hat redhatrelease2 key
  • samba-winbind-clients is earlier than 0:4.2.3-12.el7_2
  • AND samba-winbind-clients is signed with Red Hat redhatrelease2 key
  • samba-winbind-krb5-locator is earlier than 0:4.2.3-12.el7_2
  • AND samba-winbind-krb5-locator is signed with Red Hat redhatrelease2 key
  • samba-winbind-modules is earlier than 0:4.2.3-12.el7_2
  • AND samba-winbind-modules is signed with Red Hat redhatrelease2 key
  • Definition Synopsis
  • Release Information
  • Red Hat Enterprise Linux 6 Client is installed
  • OR Red Hat Enterprise Linux 6 Server is installed
  • OR Red Hat Enterprise Linux 6 Workstation is installed
  • OR Red Hat Enterprise Linux 6 ComputeNode is installed
  • AND
  • libsmbclient is earlier than 0:3.6.23-25.el6_7
  • AND libsmbclient is signed with Red Hat redhatrelease2 key
  • libsmbclient-devel is earlier than 0:3.6.23-25.el6_7
  • AND libsmbclient-devel is signed with Red Hat redhatrelease2 key
  • samba is earlier than 0:3.6.23-25.el6_7
  • AND samba is signed with Red Hat redhatrelease2 key
  • samba-client is earlier than 0:3.6.23-25.el6_7
  • AND samba-client is signed with Red Hat redhatrelease2 key
  • samba-common is earlier than 0:3.6.23-25.el6_7
  • AND samba-common is signed with Red Hat redhatrelease2 key
  • samba-doc is earlier than 0:3.6.23-25.el6_7
  • AND samba-doc is signed with Red Hat redhatrelease2 key
  • samba-domainjoin-gui is earlier than 0:3.6.23-25.el6_7
  • AND samba-domainjoin-gui is signed with Red Hat redhatrelease2 key
  • samba-glusterfs is earlier than 0:3.6.23-25.el6_7
  • AND samba-glusterfs is signed with Red Hat redhatrelease2 key
  • samba-swat is earlier than 0:3.6.23-25.el6_7
  • AND samba-swat is signed with Red Hat redhatrelease2 key
  • samba-winbind is earlier than 0:3.6.23-25.el6_7
  • AND samba-winbind is signed with Red Hat redhatrelease2 key
  • samba-winbind-clients is earlier than 0:3.6.23-25.el6_7
  • AND samba-winbind-clients is signed with Red Hat redhatrelease2 key
  • samba-winbind-devel is earlier than 0:3.6.23-25.el6_7
  • AND samba-winbind-devel is signed with Red Hat redhatrelease2 key
  • samba-winbind-krb5-locator is earlier than 0:3.6.23-25.el6_7
  • AND samba-winbind-krb5-locator is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 7 Client is installed
  • OR Red Hat Enterprise Linux 7 Server is installed
  • OR Red Hat Enterprise Linux 7 Workstation is installed
  • OR Red Hat Enterprise Linux 7 ComputeNode is installed
  • AND
  • ctdb is earlier than 0:4.2.3-12.el7_2
  • AND ctdb is signed with Red Hat redhatrelease2 key
  • ctdb-devel is earlier than 0:4.2.3-12.el7_2
  • AND ctdb-devel is signed with Red Hat redhatrelease2 key
  • ctdb-tests is earlier than 0:4.2.3-12.el7_2
  • AND ctdb-tests is signed with Red Hat redhatrelease2 key
  • libsmbclient is earlier than 0:4.2.3-12.el7_2
  • AND libsmbclient is signed with Red Hat redhatrelease2 key
  • libsmbclient-devel is earlier than 0:4.2.3-12.el7_2
  • AND libsmbclient-devel is signed with Red Hat redhatrelease2 key
  • libwbclient is earlier than 0:4.2.3-12.el7_2
  • AND libwbclient is signed with Red Hat redhatrelease2 key
  • libwbclient-devel is earlier than 0:4.2.3-12.el7_2
  • AND libwbclient-devel is signed with Red Hat redhatrelease2 key
  • samba is earlier than 0:4.2.3-12.el7_2
  • AND samba is signed with Red Hat redhatrelease2 key
  • samba-client is earlier than 0:4.2.3-12.el7_2
  • AND samba-client is signed with Red Hat redhatrelease2 key
  • samba-client-libs is earlier than 0:4.2.3-12.el7_2
  • AND samba-client-libs is signed with Red Hat redhatrelease2 key
  • samba-common is earlier than 0:4.2.3-12.el7_2
  • AND samba-common is signed with Red Hat redhatrelease2 key
  • samba-common-libs is earlier than 0:4.2.3-12.el7_2
  • AND samba-common-libs is signed with Red Hat redhatrelease2 key
  • samba-common-tools is earlier than 0:4.2.3-12.el7_2
  • AND samba-common-tools is signed with Red Hat redhatrelease2 key
  • samba-dc is earlier than 0:4.2.3-12.el7_2
  • AND samba-dc is signed with Red Hat redhatrelease2 key
  • samba-dc-libs is earlier than 0:4.2.3-12.el7_2
  • AND samba-dc-libs is signed with Red Hat redhatrelease2 key
  • samba-devel is earlier than 0:4.2.3-12.el7_2
  • AND samba-devel is signed with Red Hat redhatrelease2 key
  • samba-libs is earlier than 0:4.2.3-12.el7_2
  • AND samba-libs is signed with Red Hat redhatrelease2 key
  • samba-pidl is earlier than 0:4.2.3-12.el7_2
  • AND samba-pidl is signed with Red Hat redhatrelease2 key
  • samba-python is earlier than 0:4.2.3-12.el7_2
  • AND samba-python is signed with Red Hat redhatrelease2 key
  • samba-test is earlier than 0:4.2.3-12.el7_2
  • AND samba-test is signed with Red Hat redhatrelease2 key
  • samba-test-devel is earlier than 0:4.2.3-12.el7_2
  • AND samba-test-devel is signed with Red Hat redhatrelease2 key
  • samba-test-libs is earlier than 0:4.2.3-12.el7_2
  • AND samba-test-libs is signed with Red Hat redhatrelease2 key
  • samba-vfs-glusterfs is earlier than 0:4.2.3-12.el7_2
  • AND samba-vfs-glusterfs is signed with Red Hat redhatrelease2 key
  • samba-winbind is earlier than 0:4.2.3-12.el7_2
  • AND samba-winbind is signed with Red Hat redhatrelease2 key
  • samba-winbind-clients is earlier than 0:4.2.3-12.el7_2
  • AND samba-winbind-clients is signed with Red Hat redhatrelease2 key
  • samba-winbind-krb5-locator is earlier than 0:4.2.3-12.el7_2
  • AND samba-winbind-krb5-locator is signed with Red Hat redhatrelease2 key
  • samba-winbind-modules is earlier than 0:4.2.3-12.el7_2
  • AND samba-winbind-modules is signed with Red Hat redhatrelease2 key
  • BACK