RHBA-2005:555 - Bug Fix Advisory

Topic

Updated libsoup packages that fix an NTLM authentication bug are now available.

Description

Libsoup is an HTTP library implementation in C. It was originally part
of a SOAP (Simple Object Access Protocol) implementation called Soup, but
the SOAP and non-SOAP parts have now been split into separate packages.

A bug was found in the libsoup package, used by the evolution-connector
package for communicating with Microsoft Exchange servers in the Evolution
groupware client.

Attempts to authenticate against an Exchange server using NTLM
authentication with usernames of the form DOMAIN\USERNAME would fail, with
this misleading error message: "Could not authenticate to server. (Password
incorrect?)". This issue has been fixed.

All users of libsoup should upgrade to these updated packages, which
resolve this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 159901 - Add patch to fix bad domains when doing NTLM authentication against an Exchange server

CVEs

(none)

References

(none)