RHSA-2016:0624Critical

Red Hat Security Advisory: samba3x security update

Published
April 12, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (6)

CVE-2016-2115 →CVE-2016-2118 →CVE-2015-5370 →CVE-2016-2110 →CVE-2016-2111 →CVE-2016-2112 →

📋 Description

CVE-2015-5370 — samba: crash in dcesrv_auth_bind_ack due to missing error check CVE-2016-2110 — samba: Man-in-the-middle attacks possible with NTLMSSP authentication CVE-2016-2111 — samba: Spoofing vulnerability when domain controller is configured CVE-2016-2112 — samba: Missing downgrade detection CVE-2016-2115 — samba: Smb signing not required by default when smb client connection is used for ipc usage CVE-2016-2118 — samba: SAMR and LSA man in the middle attacks

🎯 Affected products49

  • Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • Red Hat Enterprise Linux Long Life (v. 5.9 server)
  • samba3x-0:3.6.23-12.el5_6.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-0:3.6.23-12.el5_6.ia64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-0:3.6.23-12.el5_6.src as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-0:3.6.23-12.el5_6.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-0:3.6.23-12.el5_9.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)
  • samba3x-0:3.6.23-12.el5_9.src as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)
  • samba3x-0:3.6.23-12.el5_9.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)
  • samba3x-client-0:3.6.23-12.el5_6.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-client-0:3.6.23-12.el5_6.ia64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-client-0:3.6.23-12.el5_6.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-client-0:3.6.23-12.el5_9.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)
  • samba3x-client-0:3.6.23-12.el5_9.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)
  • samba3x-common-0:3.6.23-12.el5_6.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-common-0:3.6.23-12.el5_6.ia64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-common-0:3.6.23-12.el5_6.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-common-0:3.6.23-12.el5_9.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)
  • samba3x-common-0:3.6.23-12.el5_9.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)
  • samba3x-debuginfo-0:3.6.23-12.el5_6.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-debuginfo-0:3.6.23-12.el5_6.ia64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-debuginfo-0:3.6.23-12.el5_6.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-debuginfo-0:3.6.23-12.el5_9.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)
  • samba3x-debuginfo-0:3.6.23-12.el5_9.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)
  • samba3x-doc-0:3.6.23-12.el5_6.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-doc-0:3.6.23-12.el5_6.ia64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-doc-0:3.6.23-12.el5_6.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • samba3x-doc-0:3.6.23-12.el5_9.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)
  • samba3x-doc-0:3.6.23-12.el5_9.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)
  • samba3x-domainjoin-gui-0:3.6.23-12.el5_6.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.6 server)
  • +19 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, the smb service will be restarted automatically.

🔗 References (13)