Topic: Domain login broken after - windows update KB5028166

[dvdsmith]

FYI, just had the following pop on a test Win 10 Pro client (22H2). Expected Patch Tuesday security update.

2023-08 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5029244)

Installing it DOES break trust, so it must include the same fix that broke trust in KB5028166.

Just an advisory as we wait for the Samba patch to hit EL7. More details found here.
https://www.neowin.net/news/windows-10-august-2023-patch-tuesday-kb5029244-out--heres-whats-new-and-whats-broke/

EDIT: In case anyone needs it for a script the following uninstalls KB5029244 from a command prompt in Win10 22H2. Adjust parameters as necessary.

Code: [Select]

dism /Online /Remove-Package /PackageName:Package_for_RollupFix~31bf3856ad364e35~amd64~~19041.3324.1.7 /quiet /norestart

[ReetP]

FYI we are looking at adding patched samba rpms to the build system as a possible workaround.

We have built them as a test in my repo. However buildys is having a hissy fit right now.

We will keep you posted.

[TerryF]

There is now a patched samba rpm in /smetest only a short term fix until upstream RH release of EL7 patched rpm.

While some of us have updated to this patched package and nothing has blown up yet, doesnt guarantee that it wont, Use at your own risk, I say again YOUR OWN RISK..

On advice:

Code: [Select]

yum install samba --enablerepo=smetest 

Do NOT yum update

Enjoy

[ReetP]

As per Terrys advice above, this is strictly an emergency measure to assist Windows admins.

We make ZERO guarantees about this patch.

Only use it if absolutely necessary and please test it carefully before use.

We hope that RHEL will push updated rpms in due course.

[dloayza]

Hello

The rpm file was deleted from smetest?

I'm trying to fix a server and samba is taked from smeupdates (this file don´t fix the problem)

Some days ago the command "yum install samba --enablerepo=smetest" worked fine.

Someone knows?

Thanks

[Jean-Philippe Pialasse]

now in smeupdates-testing

yum install samba --enablerepo=smeupdates-testing

[dvdsmith]

now in smeupdates-testing

yum install samba --enablerepo=smeupdates-testing

FWIW, did this a couple days ago, no issues.

Also, on a test system installed the latest Win10 22H2 Update Preview (KB5029331) and it still works. This will likely be the September Patch Tuesday, though the actual KB number may change.

[john56]

Code: [Select]

yum install samba --enablerepo=smeupdates-testingI did it too.  No Issues. Useful to begin a school year in high school with serenity... thanks.

[ReetP]

Just remember..... This has zero guarantees.

Hence it is in a test repo.

Don't use it unless you absolutely have to.

Make sure you keep a close lookout for issues.

[jayraym]

The fix works for me as well, thanks guys!