重要(Important):sambaのセキュリティアップデート
セキュリティ・アドバイス
概要:
サービス拒否の脆弱性を修正したsambaのアップデートパッケージが利用可能になりました。
このアップデートは、レッドハットセキュリティ対策チームによって、深刻度「重要(Important)」のセキュリティ問題と評価されています。
Sambaは、SMB/CIFSクライアントへのファイルおよびプリンタ共有サービスを提供します。
smbdデーモンが共有へのアクティブ接続を追跡する処理で、サービス拒否のバグが見つかりました。リモート攻撃者が巧妙に作成されたsmb要求を送信することにより、smbdデーモンに大量のシステムメモリを消費させることが可能です。(CVE-2006-3403)
Sambaのユーザは、この問題を修正するバックポートパッチを含む上記パッケージにアップグレードしてください。
アップデート・パッケージ:
| Red Hat Desktop (v. 3) | |
| SRPMS: | |
| samba-3.0.9-1.3E.10.src.rpm | ff01b3cb9e7a235e85bfcb934fcd0b52 |
| IA-32: | |
| samba-3.0.9-1.3E.10.i386.rpm | afe7f51705750af98376d4b72eab0e3a |
| samba-client-3.0.9-1.3E.10.i386.rpm | dfc3dbca60435d016690ea7b78ced477 |
| samba-common-3.0.9-1.3E.10.i386.rpm | 01b088d2928e3957c40f6290ab067be6 |
| samba-swat-3.0.9-1.3E.10.i386.rpm | 030c6a9c4f242afc59f7eb6ce2024480 |
| x86_64: | |
| samba-3.0.9-1.3E.10.i386.rpm | afe7f51705750af98376d4b72eab0e3a |
| samba-3.0.9-1.3E.10.x86_64.rpm | ca7e3c02f8dbd7f03d01e467489c34cd |
| samba-client-3.0.9-1.3E.10.x86_64.rpm | 3294ec6317982be1ebbd842d9e1852b0 |
| samba-common-3.0.9-1.3E.10.i386.rpm | 01b088d2928e3957c40f6290ab067be6 |
| samba-common-3.0.9-1.3E.10.x86_64.rpm | dbd68f6c8e315652958674ebf2c62e08 |
| samba-swat-3.0.9-1.3E.10.x86_64.rpm | b303f8dbf6ecf83859663df1100410af |
| Red Hat Desktop (v. 4) | |
| SRPMS: | |
| samba-3.0.10-1.4E.6.2.src.rpm | 9724ce298ee37a3e378822a57a0a33dc |
| IA-32: | |
| samba-3.0.10-1.4E.6.2.i386.rpm | dfa53665255d6fd2ffdebfee99d5a3b0 |
| samba-client-3.0.10-1.4E.6.2.i386.rpm | 36b1cd36740619f3d5b41c008135c502 |
| samba-common-3.0.10-1.4E.6.2.i386.rpm | 61e19ce7eef9aaaf74da73b84f29f3c0 |
| samba-swat-3.0.10-1.4E.6.2.i386.rpm | e53a6a487263b67389d18866c2330179 |
| x86_64: | |
| samba-3.0.10-1.4E.6.2.x86_64.rpm | 414a2986d5bf7a466a39826ecf6ed1c6 |
| samba-client-3.0.10-1.4E.6.2.x86_64.rpm | caab365161a896c72ee7cb1238307cb9 |
| samba-common-3.0.10-1.4E.6.2.i386.rpm | 61e19ce7eef9aaaf74da73b84f29f3c0 |
| samba-common-3.0.10-1.4E.6.2.x86_64.rpm | 4686784c27aefc4acef6e7ffeb82adef |
| samba-swat-3.0.10-1.4E.6.2.x86_64.rpm | e9687c733040c725360ffae580b4c66c |
| Red Hat Enterprise Linux AS (v. 2.1) | |
| SRPMS: | |
| samba-2.2.12-1.21as.5.src.rpm | 744771460c14a1af1b58e82ec52cb6a5 |
| IA-32: | |
| samba-2.2.12-1.21as.5.i386.rpm | c04ce6edfe57da898769cb29454d09c9 |
| samba-client-2.2.12-1.21as.5.i386.rpm | fa9bab9c09624e93d40025a7d06db389 |
| samba-common-2.2.12-1.21as.5.i386.rpm | 744c5053e812e7bf8a7bb61fd5b4dce4 |
| samba-swat-2.2.12-1.21as.5.i386.rpm | 4214be9c3ab7096b58a86801983bd5c6 |
| IA-64: | |
| samba-2.2.12-1.21as.5.ia64.rpm | cf8e05d8735bb3c08229f871afd0089d |
| samba-client-2.2.12-1.21as.5.ia64.rpm | 92ae124fb9f103e979f558278c78e90d |
| samba-common-2.2.12-1.21as.5.ia64.rpm | 8dff37f2d3cf2174f4975f85862d97d7 |
| samba-swat-2.2.12-1.21as.5.ia64.rpm | 60b1b37841a5aea18f3d1837337e7545 |
| Red Hat Enterprise Linux AS (v. 3) | |
| SRPMS: | |
| samba-3.0.9-1.3E.10.src.rpm | ff01b3cb9e7a235e85bfcb934fcd0b52 |
| IA-32: | |
| samba-3.0.9-1.3E.10.i386.rpm | afe7f51705750af98376d4b72eab0e3a |
| samba-client-3.0.9-1.3E.10.i386.rpm | dfc3dbca60435d016690ea7b78ced477 |
| samba-common-3.0.9-1.3E.10.i386.rpm | 01b088d2928e3957c40f6290ab067be6 |
| samba-swat-3.0.9-1.3E.10.i386.rpm | 030c6a9c4f242afc59f7eb6ce2024480 |
| IA-64: | |
| samba-3.0.9-1.3E.10.i386.rpm | afe7f51705750af98376d4b72eab0e3a |
| samba-3.0.9-1.3E.10.ia64.rpm | 0934a9f9a74a205a81eda7296c6031a8 |
| samba-client-3.0.9-1.3E.10.ia64.rpm | b0310000d5fb345ca6c16428afbf1032 |
| samba-common-3.0.9-1.3E.10.i386.rpm | 01b088d2928e3957c40f6290ab067be6 |
| samba-common-3.0.9-1.3E.10.ia64.rpm | 33585206d76cec5b6293bc10fcc9681d |
| samba-swat-3.0.9-1.3E.10.ia64.rpm | c39bf636ea6434b2e241446d5b51fa9c |
| PPC: | |
| samba-3.0.9-1.3E.10.ppc.rpm | 8c51b16445534cc7a4ca49eb5cd4890a |
| samba-3.0.9-1.3E.10.ppc64.rpm | 5766e87f7ea6d1e0c36f53fb4b61bcbb |
| samba-client-3.0.9-1.3E.10.ppc.rpm | d3971637751b9653dbb8e638a54846c0 |
| samba-common-3.0.9-1.3E.10.ppc.rpm | d06644b9dc4d459f55c6ba6a2bdd5100 |
| samba-common-3.0.9-1.3E.10.ppc64.rpm | 4210cb3f8eef958db98543262972beb2 |
| samba-swat-3.0.9-1.3E.10.ppc.rpm | 930bb7cdcd5bd0e2214254f96c3f7ce2 |
| s390: | |
| samba-3.0.9-1.3E.10.s390.rpm | 6e6e3c6b46ad6b30e7ba6e40be69f73a |
| samba-client-3.0.9-1.3E.10.s390.rpm | a0c6e17b4ea40829adb1ff425b2c67c6 |
| samba-common-3.0.9-1.3E.10.s390.rpm | bd7a20a3222cfcb057a3dbda23cf2341 |
| samba-swat-3.0.9-1.3E.10.s390.rpm | 37122bfe4d8708d230ca6547996bf994 |
| s390x: | |
| samba-3.0.9-1.3E.10.s390.rpm | 6e6e3c6b46ad6b30e7ba6e40be69f73a |
| samba-3.0.9-1.3E.10.s390x.rpm | 0618de37f16ea17d7566bcfd05f93472 |
| samba-client-3.0.9-1.3E.10.s390x.rpm | e70a8e4d68d8bf921ee7551fcb24cd02 |
| samba-common-3.0.9-1.3E.10.s390.rpm | bd7a20a3222cfcb057a3dbda23cf2341 |
| samba-common-3.0.9-1.3E.10.s390x.rpm | d9a8d3539074074cb36ddc72c681b271 |
| samba-swat-3.0.9-1.3E.10.s390x.rpm | 3da9025363680629381f971a828d302e |
| x86_64: | |
| samba-3.0.9-1.3E.10.i386.rpm | afe7f51705750af98376d4b72eab0e3a |
| samba-3.0.9-1.3E.10.x86_64.rpm | ca7e3c02f8dbd7f03d01e467489c34cd |
| samba-client-3.0.9-1.3E.10.x86_64.rpm | 3294ec6317982be1ebbd842d9e1852b0 |
| samba-common-3.0.9-1.3E.10.i386.rpm | 01b088d2928e3957c40f6290ab067be6 |
| samba-common-3.0.9-1.3E.10.x86_64.rpm | dbd68f6c8e315652958674ebf2c62e08 |
| samba-swat-3.0.9-1.3E.10.x86_64.rpm | b303f8dbf6ecf83859663df1100410af |
| Red Hat Enterprise Linux AS (v. 4) | |
| SRPMS: | |
| samba-3.0.10-1.4E.6.2.src.rpm | 9724ce298ee37a3e378822a57a0a33dc |
| IA-32: | |
| samba-3.0.10-1.4E.6.2.i386.rpm | dfa53665255d6fd2ffdebfee99d5a3b0 |
| samba-client-3.0.10-1.4E.6.2.i386.rpm | 36b1cd36740619f3d5b41c008135c502 |
| samba-common-3.0.10-1.4E.6.2.i386.rpm | 61e19ce7eef9aaaf74da73b84f29f3c0 |
| samba-swat-3.0.10-1.4E.6.2.i386.rpm | e53a6a487263b67389d18866c2330179 |
| IA-64: | |
| samba-3.0.10-1.4E.6.2.ia64.rpm | 401077259ed47bbdb87cf6e206700b09 |
| samba-client-3.0.10-1.4E.6.2.ia64.rpm | b73c189d7acc898a325d83e4147fe98c |
| samba-common-3.0.10-1.4E.6.2.i386.rpm | 61e19ce7eef9aaaf74da73b84f29f3c0 |
| samba-common-3.0.10-1.4E.6.2.ia64.rpm | c7f3795dfff3cce6e26e0e2acc6b86c1 |
| samba-swat-3.0.10-1.4E.6.2.ia64.rpm | a6c6a9d55966afc8f8fe0fd0a554208d |
| PPC: | |
| samba-3.0.10-1.4E.6.2.ppc.rpm | 095b804edce6df4d9d0b99bed6222e5e |
| samba-client-3.0.10-1.4E.6.2.ppc.rpm | 417f79b512bd1492727f0a22eadfe57a |
| samba-common-3.0.10-1.4E.6.2.ppc.rpm | 0d6d8f0a479c9d5f0e0e1603d66d69c6 |
| samba-common-3.0.10-1.4E.6.2.ppc64.rpm | 63418d744a15848b48779088a186d6a6 |
| samba-swat-3.0.10-1.4E.6.2.ppc.rpm | 583ff31d946f8fd96a7581aaa71ec77d |
| s390: | |
| samba-3.0.10-1.4E.6.2.s390.rpm | 84f7081f936aecba3606d09ff3ea6716 |
| samba-client-3.0.10-1.4E.6.2.s390.rpm | 9ab1de15d5582517f8e4b6348f789961 |
| samba-common-3.0.10-1.4E.6.2.s390.rpm | 362db413cd4d3069a2ba757322d11581 |
| samba-swat-3.0.10-1.4E.6.2.s390.rpm | 6b3b3607acd87505660c97c753c6f8e5 |
| s390x: | |
| samba-3.0.10-1.4E.6.2.s390x.rpm | 381aad2d50b8fe55c7a0aaaca2c956c1 |
| samba-client-3.0.10-1.4E.6.2.s390x.rpm | 27c38f6e43ac9032c760456eadeaf4b3 |
| samba-common-3.0.10-1.4E.6.2.s390.rpm | 362db413cd4d3069a2ba757322d11581 |
| samba-common-3.0.10-1.4E.6.2.s390x.rpm | 62ca657bff33fabe5df0ebc18fd58589 |
| samba-swat-3.0.10-1.4E.6.2.s390x.rpm | 91b3a34774aa143e017a158906ae4fc5 |
| x86_64: | |
| samba-3.0.10-1.4E.6.2.x86_64.rpm | 414a2986d5bf7a466a39826ecf6ed1c6 |
| samba-client-3.0.10-1.4E.6.2.x86_64.rpm | caab365161a896c72ee7cb1238307cb9 |
| samba-common-3.0.10-1.4E.6.2.i386.rpm | 61e19ce7eef9aaaf74da73b84f29f3c0 |
| samba-common-3.0.10-1.4E.6.2.x86_64.rpm | 4686784c27aefc4acef6e7ffeb82adef |
| samba-swat-3.0.10-1.4E.6.2.x86_64.rpm | e9687c733040c725360ffae580b4c66c |
| Red Hat Enterprise Linux ES (v. 2.1) | |
| SRPMS: | |
| samba-2.2.12-1.21as.5.src.rpm | 744771460c14a1af1b58e82ec52cb6a5 |
| IA-32: | |
| samba-2.2.12-1.21as.5.i386.rpm | c04ce6edfe57da898769cb29454d09c9 |
| samba-client-2.2.12-1.21as.5.i386.rpm | fa9bab9c09624e93d40025a7d06db389 |
| samba-common-2.2.12-1.21as.5.i386.rpm | 744c5053e812e7bf8a7bb61fd5b4dce4 |
| samba-swat-2.2.12-1.21as.5.i386.rpm | 4214be9c3ab7096b58a86801983bd5c6 |
| Red Hat Enterprise Linux ES (v. 3) | |
| SRPMS: | |
| samba-3.0.9-1.3E.10.src.rpm | ff01b3cb9e7a235e85bfcb934fcd0b52 |
| IA-32: | |
| samba-3.0.9-1.3E.10.i386.rpm | afe7f51705750af98376d4b72eab0e3a |
| samba-client-3.0.9-1.3E.10.i386.rpm | dfc3dbca60435d016690ea7b78ced477 |
| samba-common-3.0.9-1.3E.10.i386.rpm | 01b088d2928e3957c40f6290ab067be6 |
| samba-swat-3.0.9-1.3E.10.i386.rpm | 030c6a9c4f242afc59f7eb6ce2024480 |
| IA-64: | |
| samba-3.0.9-1.3E.10.i386.rpm | afe7f51705750af98376d4b72eab0e3a |
| samba-3.0.9-1.3E.10.ia64.rpm | 0934a9f9a74a205a81eda7296c6031a8 |
| samba-client-3.0.9-1.3E.10.ia64.rpm | b0310000d5fb345ca6c16428afbf1032 |
| samba-common-3.0.9-1.3E.10.i386.rpm | 01b088d2928e3957c40f6290ab067be6 |
| samba-common-3.0.9-1.3E.10.ia64.rpm | 33585206d76cec5b6293bc10fcc9681d |
| samba-swat-3.0.9-1.3E.10.ia64.rpm | c39bf636ea6434b2e241446d5b51fa9c |
| x86_64: | |
| samba-3.0.9-1.3E.10.i386.rpm | afe7f51705750af98376d4b72eab0e3a |
| samba-3.0.9-1.3E.10.x86_64.rpm | ca7e3c02f8dbd7f03d01e467489c34cd |
| samba-client-3.0.9-1.3E.10.x86_64.rpm | 3294ec6317982be1ebbd842d9e1852b0 |
| samba-common-3.0.9-1.3E.10.i386.rpm | 01b088d2928e3957c40f6290ab067be6 |
| samba-common-3.0.9-1.3E.10.x86_64.rpm | dbd68f6c8e315652958674ebf2c62e08 |
| samba-swat-3.0.9-1.3E.10.x86_64.rpm | b303f8dbf6ecf83859663df1100410af |
| Red Hat Enterprise Linux ES (v. 4) | |
| SRPMS: | |
| samba-3.0.10-1.4E.6.2.src.rpm | 9724ce298ee37a3e378822a57a0a33dc |
| IA-32: | |
| samba-3.0.10-1.4E.6.2.i386.rpm | dfa53665255d6fd2ffdebfee99d5a3b0 |
| samba-client-3.0.10-1.4E.6.2.i386.rpm | 36b1cd36740619f3d5b41c008135c502 |
| samba-common-3.0.10-1.4E.6.2.i386.rpm | 61e19ce7eef9aaaf74da73b84f29f3c0 |
| samba-swat-3.0.10-1.4E.6.2.i386.rpm | e53a6a487263b67389d18866c2330179 |
| IA-64: | |
| samba-3.0.10-1.4E.6.2.ia64.rpm | 401077259ed47bbdb87cf6e206700b09 |
| samba-client-3.0.10-1.4E.6.2.ia64.rpm | b73c189d7acc898a325d83e4147fe98c |
| samba-common-3.0.10-1.4E.6.2.i386.rpm | 61e19ce7eef9aaaf74da73b84f29f3c0 |
| samba-common-3.0.10-1.4E.6.2.ia64.rpm | c7f3795dfff3cce6e26e0e2acc6b86c1 |
| samba-swat-3.0.10-1.4E.6.2.ia64.rpm | a6c6a9d55966afc8f8fe0fd0a554208d |
| x86_64: | |
| samba-3.0.10-1.4E.6.2.x86_64.rpm | 414a2986d5bf7a466a39826ecf6ed1c6 |
| samba-client-3.0.10-1.4E.6.2.x86_64.rpm | caab365161a896c72ee7cb1238307cb9 |
| samba-common-3.0.10-1.4E.6.2.i386.rpm | 61e19ce7eef9aaaf74da73b84f29f3c0 |
| samba-common-3.0.10-1.4E.6.2.x86_64.rpm | 4686784c27aefc4acef6e7ffeb82adef |
| samba-swat-3.0.10-1.4E.6.2.x86_64.rpm | e9687c733040c725360ffae580b4c66c |
| Red Hat Enterprise Linux WS (v. 2.1) | |
| SRPMS: | |
| samba-2.2.12-1.21as.5.src.rpm | 744771460c14a1af1b58e82ec52cb6a5 |
| IA-32: | |
| samba-2.2.12-1.21as.5.i386.rpm | c04ce6edfe57da898769cb29454d09c9 |
| samba-client-2.2.12-1.21as.5.i386.rpm | fa9bab9c09624e93d40025a7d06db389 |
| samba-common-2.2.12-1.21as.5.i386.rpm | 744c5053e812e7bf8a7bb61fd5b4dce4 |
| samba-swat-2.2.12-1.21as.5.i386.rpm | 4214be9c3ab7096b58a86801983bd5c6 |
| Red Hat Enterprise Linux WS (v. 3) | |
| SRPMS: | |
| samba-3.0.9-1.3E.10.src.rpm | ff01b3cb9e7a235e85bfcb934fcd0b52 |
| IA-32: | |
| samba-3.0.9-1.3E.10.i386.rpm | afe7f51705750af98376d4b72eab0e3a |
| samba-client-3.0.9-1.3E.10.i386.rpm | dfc3dbca60435d016690ea7b78ced477 |
| samba-common-3.0.9-1.3E.10.i386.rpm | 01b088d2928e3957c40f6290ab067be6 |
| samba-swat-3.0.9-1.3E.10.i386.rpm | 030c6a9c4f242afc59f7eb6ce2024480 |
| IA-64: | |
| samba-3.0.9-1.3E.10.i386.rpm | afe7f51705750af98376d4b72eab0e3a |
| samba-3.0.9-1.3E.10.ia64.rpm | 0934a9f9a74a205a81eda7296c6031a8 |
| samba-client-3.0.9-1.3E.10.ia64.rpm | b0310000d5fb345ca6c16428afbf1032 |
| samba-common-3.0.9-1.3E.10.i386.rpm | 01b088d2928e3957c40f6290ab067be6 |
| samba-common-3.0.9-1.3E.10.ia64.rpm | 33585206d76cec5b6293bc10fcc9681d |
| samba-swat-3.0.9-1.3E.10.ia64.rpm | c39bf636ea6434b2e241446d5b51fa9c |
| x86_64: | |
| samba-3.0.9-1.3E.10.i386.rpm | afe7f51705750af98376d4b72eab0e3a |
| samba-3.0.9-1.3E.10.x86_64.rpm | ca7e3c02f8dbd7f03d01e467489c34cd |
| samba-client-3.0.9-1.3E.10.x86_64.rpm | 3294ec6317982be1ebbd842d9e1852b0 |
| samba-common-3.0.9-1.3E.10.i386.rpm | 01b088d2928e3957c40f6290ab067be6 |
| samba-common-3.0.9-1.3E.10.x86_64.rpm | dbd68f6c8e315652958674ebf2c62e08 |
| samba-swat-3.0.9-1.3E.10.x86_64.rpm | b303f8dbf6ecf83859663df1100410af |
| Red Hat Enterprise Linux WS (v. 4) | |
| SRPMS: | |
| samba-3.0.10-1.4E.6.2.src.rpm | 9724ce298ee37a3e378822a57a0a33dc |
| IA-32: | |
| samba-3.0.10-1.4E.6.2.i386.rpm | dfa53665255d6fd2ffdebfee99d5a3b0 |
| samba-client-3.0.10-1.4E.6.2.i386.rpm | 36b1cd36740619f3d5b41c008135c502 |
| samba-common-3.0.10-1.4E.6.2.i386.rpm | 61e19ce7eef9aaaf74da73b84f29f3c0 |
| samba-swat-3.0.10-1.4E.6.2.i386.rpm | e53a6a487263b67389d18866c2330179 |
| IA-64: | |
| samba-3.0.10-1.4E.6.2.ia64.rpm | 401077259ed47bbdb87cf6e206700b09 |
| samba-client-3.0.10-1.4E.6.2.ia64.rpm | b73c189d7acc898a325d83e4147fe98c |
| samba-common-3.0.10-1.4E.6.2.i386.rpm | 61e19ce7eef9aaaf74da73b84f29f3c0 |
| samba-common-3.0.10-1.4E.6.2.ia64.rpm | c7f3795dfff3cce6e26e0e2acc6b86c1 |
| samba-swat-3.0.10-1.4E.6.2.ia64.rpm | a6c6a9d55966afc8f8fe0fd0a554208d |
| x86_64: | |
| samba-3.0.10-1.4E.6.2.x86_64.rpm | 414a2986d5bf7a466a39826ecf6ed1c6 |
| samba-client-3.0.10-1.4E.6.2.x86_64.rpm | caab365161a896c72ee7cb1238307cb9 |
| samba-common-3.0.10-1.4E.6.2.i386.rpm | 61e19ce7eef9aaaf74da73b84f29f3c0 |
| samba-common-3.0.10-1.4E.6.2.x86_64.rpm | 4686784c27aefc4acef6e7ffeb82adef |
| samba-swat-3.0.10-1.4E.6.2.x86_64.rpm | e9687c733040c725360ffae580b4c66c |
| Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor | |
| SRPMS: | |
| samba-2.2.12-1.21as.5.src.rpm | 744771460c14a1af1b58e82ec52cb6a5 |
| IA-64: | |
| samba-2.2.12-1.21as.5.ia64.rpm | cf8e05d8735bb3c08229f871afd0089d |
| samba-client-2.2.12-1.21as.5.ia64.rpm | 92ae124fb9f103e979f558278c78e90d |
| samba-common-2.2.12-1.21as.5.ia64.rpm | 8dff37f2d3cf2174f4975f85862d97d7 |
| samba-swat-2.2.12-1.21as.5.ia64.rpm | 60b1b37841a5aea18f3d1837337e7545 |
| (The unlinked packages above are only available from the Red Hat Network) | |
解決法:
このアップデートを適用する前に、システムに関連するリリース済の errata が適用済であることをご確認ください。バグジラ: (詳細は、こちらbugzilla[英語]を御覧ください。)
197836 - CVE-2006-3403 Samba denial of service
参照:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3403
ここに在るパッケージはセキュリティの為、 Red Hat, Inc. によって、 GPG 認証されています。キーは以下から利用可能になっています:
http://www.redhat.com/about/contact.html
各パッケージを確認するには次のコマンドをご利用ください: rpm --checksig filename
各パッケージが壊れていないか、もしくは改ざんされていないかを確認するには、以下のコマンドで MD5 チェックサムをお調べください: rpm --checksig --nogpg filename
注意: GnuPG キーをチェックするためには、RPM 3.0 以上が必要です。