RHSA-2016:0620Critical

Red Hat Security Advisory: samba4 security, bug fix, and enhancement update

Published
April 12, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (8)

CVE-2016-2114 →CVE-2016-2115 →CVE-2016-2118 →CVE-2015-5370 →CVE-2016-2110 →CVE-2016-2111 →CVE-2016-2112 →CVE-2016-2113 →

📋 Description

CVE-2015-5370 — samba: crash in dcesrv_auth_bind_ack due to missing error check CVE-2016-2110 — samba: Man-in-the-middle attacks possible with NTLMSSP authentication CVE-2016-2111 — samba: Spoofing vulnerability when domain controller is configured CVE-2016-2112 — samba: Missing downgrade detection CVE-2016-2113 — samba: Server certificates not validated at client side CVE-2016-2114 — samba: Samba based active directory domain controller does not enforce smb signing CVE-2016-2115 — samba: Smb signing not required by default when smb client connection is used for ipc usage CVE-2016-2118 — samba: SAMR and LSA man in the middle attacks

🎯 Affected products200

  • Red Hat Enterprise Linux HPC Node EUS (v. 6.6)
  • Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6)
  • Red Hat Enterprise Linux Server AUS (v. 6.2)
  • Red Hat Enterprise Linux Server AUS (v. 6.4)
  • Red Hat Enterprise Linux Server AUS (v. 6.5)
  • Red Hat Enterprise Linux Server EUS (v. 6.6)
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.2)
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.4)
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.5)
  • Red Hat Enterprise Linux Server Optional EUS (v. 6.6)
  • evolution-mapi-0:0.28.3-8.el6_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)
  • evolution-mapi-0:0.28.3-8.el6_2.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)
  • evolution-mapi-0:0.28.3-8.el6_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)
  • evolution-mapi-debuginfo-0:0.28.3-8.el6_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)
  • evolution-mapi-debuginfo-0:0.28.3-8.el6_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)
  • evolution-mapi-devel-0:0.28.3-8.el6_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)
  • evolution-mapi-devel-0:0.28.3-8.el6_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.2)
  • ipa-0:3.0.0-26.el6_4.5.src as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)
  • ipa-0:3.0.0-37.el6_5.1.src as a component of Red Hat Enterprise Linux Server AUS (v. 6.5)
  • ipa-0:3.0.0-42.el6_6.1.src as a component of Red Hat Enterprise Linux HPC Node EUS (v. 6.6)
  • ipa-0:3.0.0-42.el6_6.1.src as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
  • ipa-admintools-0:3.0.0-26.el6_4.5.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)
  • ipa-admintools-0:3.0.0-37.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.5)
  • ipa-admintools-0:3.0.0-42.el6_6.1.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
  • ipa-admintools-0:3.0.0-42.el6_6.1.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
  • ipa-admintools-0:3.0.0-42.el6_6.1.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
  • ipa-admintools-0:3.0.0-42.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6)
  • ipa-admintools-0:3.0.0-42.el6_6.1.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 6.6)
  • ipa-client-0:3.0.0-26.el6_4.5.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)
  • ipa-client-0:3.0.0-37.el6_5.1.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.5)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the smb service will be restarted automatically.

🔗 References (16)