Red Hat Security Advisory: samba security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2007-4138 — samba incorrect primary group assignment for domain users using the rfc2307 or sfu winbind nss info plugin CVE-2007-4572 — samba buffer overflow CVE-2007-5398 — Samba "reply_netbios_packet()" Buffer Overflow Vulnerability
🎯 Affected products43
- Red Hat Enterprise Linux (v. 5 server)
- Red Hat Enterprise Linux Desktop (v. 5 client)
- samba-0:3.0.25b-1.el5_1.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-0:3.0.25b-1.el5_1.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
- samba-0:3.0.25b-1.el5_1.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-0:3.0.25b-1.el5_1.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-0:3.0.25b-1.el5_1.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-0:3.0.25b-1.el5_1.2.src as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-0:3.0.25b-1.el5_1.2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
- samba-0:3.0.25b-1.el5_1.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-0:3.0.25b-1.el5_1.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
- samba-client-0:3.0.25b-1.el5_1.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-client-0:3.0.25b-1.el5_1.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
- samba-client-0:3.0.25b-1.el5_1.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-client-0:3.0.25b-1.el5_1.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-client-0:3.0.25b-1.el5_1.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-client-0:3.0.25b-1.el5_1.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-client-0:3.0.25b-1.el5_1.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
- samba-common-0:3.0.25b-1.el5_1.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-common-0:3.0.25b-1.el5_1.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
- samba-common-0:3.0.25b-1.el5_1.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-common-0:3.0.25b-1.el5_1.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-common-0:3.0.25b-1.el5_1.2.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-common-0:3.0.25b-1.el5_1.2.s390 as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-common-0:3.0.25b-1.el5_1.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-common-0:3.0.25b-1.el5_1.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-common-0:3.0.25b-1.el5_1.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
- samba-debuginfo-0:3.0.25b-1.el5_1.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)
- samba-debuginfo-0:3.0.25b-1.el5_1.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)
- samba-debuginfo-0:3.0.25b-1.el5_1.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)
- +13 more not shown
✅ Remediation
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To do so, run the following command (as root): pup Alternatively, for a command-line interface, run the following command: yum update To register your system to RHN, use the following command: rhn_register For information on how to manually install or remove packages, refer to the following link: http://kbase.redhat.com/faq/FAQ_80_11223.shtm
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2007:1017
- externalhttps://access.redhat.com/security/updates/classification/#critical
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=286271
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=294631
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=358831
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1017.json