RHBA-2008:0372 - Bug Fix Advisory

Topic

Updated samba packages that fix several bugs and add an enhancement are
now available.

Description

Samba is a suite of programs used by machines to share files, printers, and
other information.

These updated packages fix the following bugs:

• the 32-bit version of pam_winbind.so, required for 32-bit PAM-compatible

applications, did not work on systems running a 64-bit version of the
winbind daemon. Errors such as "Invalid request size received" occurred.

• on Samba shares with UNIX(R) CIFS extensions enabled, removing a symbolic

link using the "rm -f" command returned a successful exit code; however,
the symbolic link was never removed. Symbolic links are correctly removed
in these updated packages.

• a regression caused by the fix for CVE-2007-4572, which prevented some

clients from being able to properly access shares, has been resolved.

• changes in the way Microsoft Windows Vista handles Kerberos packets,

caused certain Samba operations to fail. In these updated packages,
Microsoft Windows Vista clients can correctly connect to Samba servers.

• in certain situations, on Microsoft Windows XP clients, attempting to

write to a file on a Samba share resulted in a "Network path was not found"
error.

• if a user created a file on a Microsoft Windows XP client, and then went

offline and modified that file, synchronizing the offline files failed with
a "Access is denied" error. In these updated packages, offline files are
correctly synchronized.

• two spellings mistakes in "smb.conf", "Netwrok" and "Scurity", have been

resolved.

• it was possible to use the nmbd command to specify invalid port numbers

(higher than 65536), causing invalid ports to be created, and, in some
cases, a "port number definition: unsigned short" error to be displayed.
In these updated packages, when an invalid port number is specified, the
default port number is used.

• communication problems with trusted domains from a Samba Domain

Controller, which caused a "Error looking up domain users" error when
running the "wbinfo -u" command, have been resolved.

• if a directory was created that only allowed the owning group execute

permissions, and the "other" group no permissions, adding a new user to the
ACL via Microsoft Windows resulted in read permissions being added to the
owning group, and the "other" group. In these updated packages, adding a
new user to an ACL via Microsoft Windows, no longer adds read permissions
when they are not specified.

• in certain situations, copying to or from a Samba share failed with a

"The specified network name is no longer available" error. Errors such as
"read_data: read failure for [x] bytes to client" and "write_data: write
failure in writing to client" were logged to the Samba log file.

As well, the winbind component has been updated, which provides support
for offline logins, and multiple IDMAP back-ends.

These updated packages upgrade Samba to version 3.0.28. For a full list of
bug fixes and enhancements, refer to the Samba release notes:
http://us3.samba.org/samba/history/samba-3.0.28a.html

Users of samba are advised to upgrade to these updated packages, which
resolve these issues and add this enhancement.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 291501 - update samba to 3.0.26a or later
• BZ - 383351 - samba returns success during posix unlink of symlinks, but doesn't remove the link
• BZ - 407091 - Critical Regression caused by CVE-2007-4572
• BZ - 425996 - Some minor Kerberos related Windows Vista fixes
• BZ - 426244 - Serveral Problems with samba 3.0.25b
• BZ - 426623 - Typo in smb.conf: Netwrok
• BZ - 429003 - smbd and nmbd allows ports higher than 65536.
• BZ - 429024 - After establish trust with AD, wbinfo -u does not work
• BZ - 431243 - Adding a user to an ACL via Windows XP GUI gives away read access for owning group
• BZ - 435316 - copy to/from samba share fails with "The specified network name is no longer available"

CVEs

(none)

References

(none)