Product SiteDocumentation Site

1.251. samba

1.251.1. RHSA-2010:0860: Critical security update

Updated samba packages that fix one security issue are now available for Red Hat Enterprise Linux 6.
The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
Samba is a suite of programs used by machines to share files, printers, and other information.
A missing array boundary checking flaw was found in the way Samba parsed the binary representation of Windows security identifiers (SIDs). A malicious client could send a specially-crafted SMB request to the Samba server, resulting in arbitrary code execution with the privileges of the Samba server (smbd). (CVE-2010-3069)
Users of Samba are advised to upgrade to these updated packages, which correct this issue. After installing this update, the smb service will be restarted automatically.

1.251.2. RHSA-2011:0305: Important security update

Updated samba packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6.
The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
Samba is a suite of programs used by machines to share files, printers, and other information.
A flaw was found in the way Samba handled file descriptors. If an attacker were able to open a large number of file descriptors on the Samba server, they could flip certain stack bits to "1" values, resulting in the Samba server (smbd) crashing. (CVE-2011-0719)
Red Hat would like to thank the Samba team for reporting this issue.
Users of Samba are advised to upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing this update, the smb service will be restarted automatically.

1.251.3. RHBA-2011:0582: bug fix and enhancement update

Updated samba packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 6.
Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information (such as lists of available files and printers).
Bug fixes:
BZ#660667
The samba packages have been upgraded to the latest upstream version 3.5.6, which provides a number of bug fixes over the previous version.
BZ#654426, BZ#617614
Previously, when a user tried to copy a file larger than 16KB to a folder shared on the Samba network file system with gvfs-copy, an "Invalid argument" error message appeared while copying the file. This was caused by the SMB Signature verification failure during data transmission. The problem has been fixed so that files can now be copied successfully.
BZ#628955
Previously, the TPS Verify Test failed for Samba. This failure has been resolved so that Samba now passes the TPS Verify Test.
BZ#629374
Previously, Samba changed attributes on file rename. This unintended behavior has been fixed so that Samba no longer changes file attributes on file rename when it is not expected to.
BZ#640888
Previously, when a user configured a printer to be used in Samba with the system-config-printer configuration utility, it was not possible to successfully run the cupsaddsmb command using the Adobe Postscript Driver. Running the command resulted in the "WERR_UNKNOWN_PRINTER_DRIVER" error message. The problem has been fixed so that the cupsaddsmb command can now be executed successfully without the error.
BZ#641368
The /etc/rc.d/init.d/nmb startup script contained an erroneous description saying that it started Samba's smbd service. In fact, the nmb script starts the nmbd service, which communicates with NetBIOS name service requests. This update corrects the description in the nmb startup script.
BZ#645173
Previously, when a domain user was added to a local group on a joined Windows workstation in Samba, a domain-joined machine failed to find other users. The issue has been resolved so that domain-joined machines are now able to find other users.
BZ#650244
Previously, there was a problem in that file names with characters encoded in ISO-8859-15 on the Samba network file system with UTF-8 configured as unix charset and display charset in the smb.conf configuration file were not displayed correctly while a user browsed the network file system with the Windows Explorer application. This has been fixed so that file names with characters encoded in ISO-8859-15 are now displayed without any character encoding problems on the Samba network file system.
BZ#650245
Previously, there was a problem with the limit of client connections in the Samba winbindd daemon. The limit was hard coded to the number of 200 connections, thus disallowing any other winbindd clients that would exceed the limit to connect. A fix resolving this bug has been applied so that it is now possible to exceed the original limit. The limit can now be set by modifying the winbind max clients option.
BZ#651947
Previously, when a user tried to connect to a Windows client with the smbclient utility, which is included in Samba, and there was at least one of the Windows Live Essentials programs installed on that Windows client, it was not possible to properly establish the connection. An error message appeared on the screen, stating "SPNEGO login failed: Invalid parameter". The problem has been fixed so that a user is now able to make a connection using the smbclient utility without getting any error.
BZ#667675
Previously, when a user tried to mount a Samba share using Kerberos 5 authentication, an input/output error was triggered and the user was unable to proceed with Samba share mounting. The fix for this problem has been provided in the smbclient utility so that share mounting with Kerberos 5 authentication works properly now.
BZ#596345
Previously, there was a typo in the smb.conf configuration file, which is included in Samba. The name of the SELinux label samba_share_t that a user uses when creating a new directory was misspelled as samba-share_t. The typo has been corrected and the smb.conf file now contains valid information.
BZ#626473
Previously, the smb.conf configuration file, which is included in Samba, misspelled the words "Network" and "Security". The misspellings have been corrected so that the content of the smb.conf file is now spelled properly.
BZ#629396
Previously, Samba was shipped with a manual page for the winbind_krb5_locator plug-in, but not with the plug-in itself. This issue has been resolved by including the missing winbind_krb5_locator plug-in in Samba.
BZ#639141
The description of the default case parameter in the smb.conf configuration file was unclear and contained misleading punctuation. This update clarifies the description so that it is unambiguous.
Enhancements:
BZ#659884
This release introduces a significant improvement in Samba performance when writing large files on the ext3, ext4, or xfs file system. The performance improvement has been made possible by using the posix_fallocate() function in write paths.
BZ#560893
This update includes an improvement in that non-root users are now able to change their passwords in Samba when the smb.conf configuration file is configured in ADS (Active Directory Service) mode. This was not possible with the previous version of the smbpasswd Samba utility. The smbd daemon must run in order to change non-root user passwords with smbpasswd successfully. Also, with the wbinfo --change-user-password command, non-root users can now change both the local user password as well as the remote Active Directory domain password at the same time.
BZ#614853
Previously, a user checked the sanity of the smb.conf Samba configuration file with the testparm utility. The utility was not user-friendly in that its usage was not consistent with the way the sanity check has been called and performed in other similar packages like postfix. This has been improved by adding a new option configtest to the service smb command.
All users requiring Samba should install these newly released packages, which resolve these issues and add these enhancements.