RHSA-2021:4844: Important: samba security update
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.Security Fix(es): samba: SMB1 client connections can be downgraded to plaintext authentication (CVE-2016-2124) samba: A user in an AD Domain could become root on domain members (CVE-2020-25717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.All users of Samba with Red Hat Gluster Storage are advised to upgrade to these updated packages.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:4844?
The severity of RHSA-2021:4844 is classified as important.
How do I fix RHSA-2021:4844?
To fix RHSA-2021:4844, you need to update the affected Samba packages to version 4.11.6-114.el7 or later.
Which Samba packages are affected by RHSA-2021:4844?
The affected Samba packages include samba, ctdb, libsmbclient, samba-client, and several other related libraries and tools.
What is the impact of not addressing RHSA-2021:4844?
Not addressing RHSA-2021:4844 could result in potential security vulnerabilities that may be exploited by attackers.
Is RHSA-2021:4844 related to SMB1 protocol?
Yes, RHSA-2021:4844 addresses vulnerabilities in the SMB1 protocol which has known security issues.