RHBA-2016:1130 - Bug Fix Advisory

Topic

Updated samba packages that fix regressions introduced by the last security release are now available for Red Hat Enterprise Linux 6.5 Advanced Update Support.

Description

Samba is an open-source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and various information.

This update fixes the following bugs:

• With the latest security update, the Samba RPC server tried to verify header signings that are not supported by this Samba version. As a consequence, this process fails when a client with enabled header signing support connects. With this update the verification has been disabled and as a result, clients can successfully authenticate to Samba. (BZ#1329970)
• With the latest security update, the smbd process tried to update the wrong Netlogon credentials for the Secure Channel connection against an Active Directory Domain Controller. As a consequence, users could no longer log on to a Samba member server. An update was applied, that generates the correct authentication tokens and as a result, users are now able to successfully authenticate to a Samba member server. (BZ#1329962)

Users of samba are advised to upgrade to these updated packages, which fix these bugs. After installing this update, the smb service will be restarted automatically.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server - AUS 6.5 x86_64
• Red Hat Enterprise Linux Server - TUS 6.5 x86_64

Fixes

• BZ - 1329962 - auth_domain fails to create schannel connection to the DC because netlogon credentials are not updated correctly

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal