RHBA-2016:1294 - Bug Fix Advisory

Topic

Updated samba3x packages that fix two bugs are now available for Red Hat
Enterprise Linux 5.

Description

Samba is an open-source implementation of the Server Message Block (SMB) or
Common Internet File System (CIFS) protocol, which allows PC-compatible machines
to share files, printers, and various information.

This update fixes the following bugs:

• With the latest security update, the Samba RPC server tried to verify header

signings that are not supported by this Samba version. As a consequence, this
process fails when a client with enabled header signing support connects. With
this update the verification has been disabled and as a result, clients can
successfully authenticate to Samba. (BZ#1326918)

• With the latest security update, the smbd process tried to update the wrong

Netlogon credentials for the Secure Channel connection against an Active
Directory Domain Controller. As a consequence, users could no longer log on to a
Samba member server. An update was applied, that generates the correct
authentication tokens and as a result, users are now able to successfully
authenticate to a Samba member server. (BZ#1329523)

Users of samba3x are advised to upgrade to these updated packages, which fix
these bugs. After installing this update, the smb service will be restarted
automatically.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc

Fixes

• BZ - 1326918 - The Samba RPC server fails to verify trailers of clients which support header signing
• BZ - 1329523 - auth_domain fails to create schannel connection to the DC because netlogon credentials are not updated correctly

CVEs

(none)

References

(none)