RHBA-2013:0338 - Bug Fix Advisory

Topic

Updated samba packages that fix multiple bugs and add various enhancements are
now available for Red Hat Enterprise Linux 6.

Description

Samba is an open-source implementation of the Server Message Block (SMB) and
Common Internet File System (CIFS) protocol, which allows PC-compatible machines
to share files, printers, and other information.

These updated samba packages include numerous bug fixes and enhancements.
Space precludes documenting all of these changes in this advisory. Users
are directed to the Red Hat Enterprise Linux 6.4 Technical Notes for
information on the most significant of these changes:

https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.4_Technical_Notes/samba.html

All users of samba are advised to upgrade to these updated packages, which
provide numerous bug fixes and enhancements.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 748407 - net ads join does not provide AES keys in host keytab
• BZ - 748831 - net ads join occasionally fails to join to domain properly
• BZ - 760109 - pam_winbind.so prevents users from other auth sources logging in
• BZ - 829818 - avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute()
• BZ - 845760 - coredump on invalid ports
• BZ - 860967 - Printing regression: We cannot print letter size correctly
• BZ - 863173 - ACL masks incorrectly applied when setting ACLs
• BZ - 864950 - Configure winbind_krb5_locator.so via alternatives to allow IPA AD trusts use - samba package
• BZ - 866412 - Samba winbind doesn't return "Domain Local" groups
• BZ - 866570 - net ads join improperly lists realm in lowercase
• BZ - 867315 - pam_winbind.conf is not packaged in samba-winbind-clients where the module is packaged.
• BZ - 876262 - Use work around for 'winbind use default domain' only if it is set
• BZ - 879578 - some read request sizes cause server to send malformed reply

CVEs

(none)

References

• https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.4_Technical_Notes/samba.html
• https://www.samba.org/samba/history/samba-3.6.0.html
• http://blogs.msdn.com/b/openspecification/archive/2011/05/31/windows-configurations-for-kerberos-supported-encryption-type.aspx