Scientific Linux 6.x and 7.x SLSA-2016:0448-1 Moderate: Samba ACL Access

Date: Tue, 15 Mar 2016 15:33:37 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: samba on SL6.x, SL7.x i386/x86_64
MIME-Version: 1.0
Message-ID: <20160315153337.6829.51915@slpackages.fnal.gov>

Synopsis: Moderate: samba security update
Advisory ID: SLSA-2016:0448-1
Issue Date: 2016-03-15
CVE Numbers: CVE-2015-7560
--

A flaw was found in the way Samba handled ACLs on symbolic links. An
authenticated user could use this flaw to gain access to an arbitrary file
or directory by overwriting its ACL. (CVE-2015-7560)

After installing this update, the smb service will be restarted
automatically.
--

SL6
 x86_64
 libsmbclient-3.6.23-25.el6_7.i686.rpm
 libsmbclient-3.6.23-25.el6_7.x86_64.rpm
 samba-client-3.6.23-25.el6_7.x86_64.rpm
 samba-common-3.6.23-25.el6_7.i686.rpm
 samba-common-3.6.23-25.el6_7.x86_64.rpm
 samba-debuginfo-3.6.23-25.el6_7.i686.rpm
 samba-debuginfo-3.6.23-25.el6_7.x86_64.rpm
 samba-winbind-3.6.23-25.el6_7.x86_64.rpm
 samba-winbind-clients-3.6.23-25.el6_7.i686.rpm
 samba-winbind-clients-3.6.23-25.el6_7.x86_64.rpm
 libsmbclient-devel-3.6.23-25.el6_7.i686.rpm
 libsmbclient-devel-3.6.23-25.el6_7.x86_64.rpm
 samba-3.6.23-25.el6_7.x86_64.rpm
 samba-doc-3.6.23-25.el6_7.x86_64.rpm
 samba-domainjoin-gui-3.6.23-25.el6_7.x86_64.rpm
 samba-glusterfs-3.6.23-25.el6_7.x86_64.rpm
 samba-swat-3.6.23-25.el6_7.x86_64.rpm
 samba-winbind-devel-3.6.23-25.el6_7.i686.rpm
 samba-winbind-devel-3.6.23-25.el6_7.x86_64.rpm
 samba-winbind-krb5-locator-3.6.23-25.el6_7.x86_64.rpm
 i386
 libsmbclient-3.6.23-25.el6_7.i686.rpm
 samba-client-3.6.23-25.el6_7.i686.rpm
 samba-common-3.6.23-25.el6_7.i686.rpm
 samba-debuginfo-3.6.23-25.el6_7.i686.rpm
 samba-winbind-3.6.23-25.el6_7.i686.rpm
 samba-winbind-clients-3.6.23-25.el6_7.i686.rpm
 libsmbclient-devel-3.6.23-25.el6_7.i686.rpm
 samba-3.6.23-25.el6_7.i686.rpm
 samba-doc-3.6.23-25.el6_7.i686.rpm
 samba-domainjoin-gui-3.6.23-25.el6_7.i686.rpm
 samba-swat-3.6.23-25.el6_7.i686.rpm
 samba-winbind-devel-3.6.23-25.el6_7.i686.rpm
 samba-winbind-krb5-locator-3.6.23-25.el6_7.i686.rpm
SL7
 x86_64
 libsmbclient-4.2.3-12.el7_2.i686.rpm
 libsmbclient-4.2.3-12.el7_2.x86_64.rpm
 libwbclient-4.2.3-12.el7_2.i686.rpm
 libwbclient-4.2.3-12.el7_2.x86_64.rpm
 samba-client-4.2.3-12.el7_2.x86_64.rpm
 samba-client-libs-4.2.3-12.el7_2.i686.rpm
 samba-client-libs-4.2.3-12.el7_2.x86_64.rpm
 samba-common-libs-4.2.3-12.el7_2.x86_64.rpm
 samba-common-tools-4.2.3-12.el7_2.x86_64.rpm
 samba-debuginfo-4.2.3-12.el7_2.i686.rpm
 samba-debuginfo-4.2.3-12.el7_2.x86_64.rpm
 samba-libs-4.2.3-12.el7_2.i686.rpm
 samba-libs-4.2.3-12.el7_2.x86_64.rpm
 samba-winbind-4.2.3-12.el7_2.x86_64.rpm
 samba-winbind-clients-4.2.3-12.el7_2.x86_64.rpm
 samba-winbind-modules-4.2.3-12.el7_2.i686.rpm
 samba-winbind-modules-4.2.3-12.el7_2.x86_64.rpm
 libsmbclient-devel-4.2.3-12.el7_2.i686.rpm
 libsmbclient-devel-4.2.3-12.el7_2.x86_64.rpm
 libwbclient-devel-4.2.3-12.el7_2.i686.rpm
 libwbclient-devel-4.2.3-12.el7_2.x86_64.rpm
 samba-4.2.3-12.el7_2.x86_64.rpm
 samba-dc-4.2.3-12.el7_2.x86_64.rpm
 samba-dc-libs-4.2.3-12.el7_2.x86_64.rpm
 samba-devel-4.2.3-12.el7_2.i686.rpm
 samba-devel-4.2.3-12.el7_2.x86_64.rpm
 samba-python-4.2.3-12.el7_2.x86_64.rpm
 samba-test-4.2.3-12.el7_2.x86_64.rpm
 samba-test-devel-4.2.3-12.el7_2.x86_64.rpm
 samba-test-libs-4.2.3-12.el7_2.i686.rpm
 samba-test-libs-4.2.3-12.el7_2.x86_64.rpm
 samba-vfs-glusterfs-4.2.3-12.el7_2.x86_64.rpm
 samba-winbind-krb5-locator-4.2.3-12.el7_2.x86_64.rpm
 noarch
 samba-common-4.2.3-12.el7_2.noarch.rpm
 samba-pidl-4.2.3-12.el7_2.noarch.rpm

- Scientific Linux Development Team