Oval Definition:oval:com.redhat.rhsa:def:20205439
Revision Date:2020-12-15Version:637
Title:RHSA-2020:5439: samba security and bug fix update (Moderate)
Description:Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: Netlogon elevation of privilege vulnerability (Zerologon) (CVE-2020-1472)

  • samba: Missing handle permissions check in SMB1/2/3 ChangeNotify (CVE-2020-14318)

  • samba: Unprivileged user can crash winbind (CVE-2020-14323)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

  • The 'require_membership_of' documentation in pam_winbind manpage is incorrect (BZ#1853272)

  • Malfunctioning %U substitution in valid users option (BZ#1868917)

  • Regression: smbd and nmbd are restarted when samba-winbind package is upgraded (BZ#1878205)

  • winbindd memory leak on wbinfo -u with security=ADS (BZ#1892313)
  • Family:unixClass:patch
    Status:Reference(s):CVE-2020-14318
    CVE-2020-14323
    CVE-2020-1472
    RHSA-2020:5439
    Platform(s):Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • ctdb is earlier than 0:4.10.16-9.el7_9
  • AND ctdb is signed with Red Hat redhatrelease2 key
  • ctdb-tests is earlier than 0:4.10.16-9.el7_9
  • AND ctdb-tests is signed with Red Hat redhatrelease2 key
  • libsmbclient is earlier than 0:4.10.16-9.el7_9
  • AND libsmbclient is signed with Red Hat redhatrelease2 key
  • libsmbclient-devel is earlier than 0:4.10.16-9.el7_9
  • AND libsmbclient-devel is signed with Red Hat redhatrelease2 key
  • libwbclient is earlier than 0:4.10.16-9.el7_9
  • AND libwbclient is signed with Red Hat redhatrelease2 key
  • libwbclient-devel is earlier than 0:4.10.16-9.el7_9
  • AND libwbclient-devel is signed with Red Hat redhatrelease2 key
  • samba is earlier than 0:4.10.16-9.el7_9
  • AND samba is signed with Red Hat redhatrelease2 key
  • samba-client is earlier than 0:4.10.16-9.el7_9
  • AND samba-client is signed with Red Hat redhatrelease2 key
  • samba-client-libs is earlier than 0:4.10.16-9.el7_9
  • AND samba-client-libs is signed with Red Hat redhatrelease2 key
  • samba-common is earlier than 0:4.10.16-9.el7_9
  • AND samba-common is signed with Red Hat redhatrelease2 key
  • samba-common-libs is earlier than 0:4.10.16-9.el7_9
  • AND samba-common-libs is signed with Red Hat redhatrelease2 key
  • samba-common-tools is earlier than 0:4.10.16-9.el7_9
  • AND samba-common-tools is signed with Red Hat redhatrelease2 key
  • samba-dc is earlier than 0:4.10.16-9.el7_9
  • AND samba-dc is signed with Red Hat redhatrelease2 key
  • samba-dc-libs is earlier than 0:4.10.16-9.el7_9
  • AND samba-dc-libs is signed with Red Hat redhatrelease2 key
  • samba-devel is earlier than 0:4.10.16-9.el7_9
  • AND samba-devel is signed with Red Hat redhatrelease2 key
  • samba-krb5-printing is earlier than 0:4.10.16-9.el7_9
  • AND samba-krb5-printing is signed with Red Hat redhatrelease2 key
  • samba-libs is earlier than 0:4.10.16-9.el7_9
  • AND samba-libs is signed with Red Hat redhatrelease2 key
  • samba-pidl is earlier than 0:4.10.16-9.el7_9
  • AND samba-pidl is signed with Red Hat redhatrelease2 key
  • samba-python is earlier than 0:4.10.16-9.el7_9
  • AND samba-python is signed with Red Hat redhatrelease2 key
  • samba-python-test is earlier than 0:4.10.16-9.el7_9
  • AND samba-python-test is signed with Red Hat redhatrelease2 key
  • samba-test is earlier than 0:4.10.16-9.el7_9
  • AND samba-test is signed with Red Hat redhatrelease2 key
  • samba-test-libs is earlier than 0:4.10.16-9.el7_9
  • AND samba-test-libs is signed with Red Hat redhatrelease2 key
  • samba-vfs-glusterfs is earlier than 0:4.10.16-9.el7_9
  • AND samba-vfs-glusterfs is signed with Red Hat redhatrelease2 key
  • samba-winbind is earlier than 0:4.10.16-9.el7_9
  • AND samba-winbind is signed with Red Hat redhatrelease2 key
  • samba-winbind-clients is earlier than 0:4.10.16-9.el7_9
  • AND samba-winbind-clients is signed with Red Hat redhatrelease2 key
  • samba-winbind-krb5-locator is earlier than 0:4.10.16-9.el7_9
  • AND samba-winbind-krb5-locator is signed with Red Hat redhatrelease2 key
  • samba-winbind-modules is earlier than 0:4.10.16-9.el7_9
  • AND samba-winbind-modules is signed with Red Hat redhatrelease2 key
  • BACK