Security Vulnerabilities fixed in samba RHSA-2021:5192

Description

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): samba: Active Directory (AD) domain user could become root on domain members (CVE-2020-25717) samba: SMB1 client connections can be downgraded to plaintext authentication (CVE-2016-2124) samba: Active Directory (AD) domain user could become root on domain members (CVE-2020-25717) samba: SMB1 client connections can be downgraded to plaintext authentication (CVE-2016-2124) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): Backport IDL changes to harden Kerberos communication (BZ#2021428) SolutionFor details on how to apply this update, which includes the changes described in this advisory, refer to:https://access.redhat.com/articles/11258 After installing this update, the smb service will be restarted automatically.

Affected Applications

samba

CVE References

CVE-2020-25717 CVE-2016-2124

Other References

https://access.redhat.com/errata/RHSA-2021:5192