Topic: URGENT - Update Samba to 2.2.8a

[David Rayroud]

Hello,

Has anyone do the update for Samba from samba-2.2.7-3.7.3es1 (comming with SME 5.6, update 3) to samba-2.2.8a (recommanded by Samba Team)?

I have downloaded the latest Samba from ftp.samba.org, decompress them but when I will lauch this command :
./configure
I have this error :
checking for gcc... no
checking for cc... no
configure: error: no acceptable cc found in $PATH

What can I do ?

Thank's

[Matt Quelch]

Have you installed the developer apps? It appears you don't have gcc (C compiler) installed, or it cannot be found... Search the site for the developer tool kit, and install that first.

[Robert]

You need a compiler to build samba-2.2.8a. However, if you want to update to 2.2.8a because of the recent security issues, you can stop worrying because the latest security patches from samba-2.2.8a are included in 2.2.7-3.7.3es1 (or 2.2.7-3.7.2es2 for SME 5.5). If you do "rpm -q --changelog samba |less" you'll see that 2.2.7-3.7.3es1 is basically RedHat's 2.2.7-3.7.3 rebuilt for SME. You'll also see that the RedHat packagers pulled in security patches from samba-2.2.8{,a}. While it is true that upstream samba versions below 2.2.8a contain security bugs, this is not necessarily true for packaged version. In fact, RedHat built samba-2.0.x packages for RedHat 7.1 with all the latest security fixes. So, don't be fooled by version numbers.

[Ray Mitchell]

Anyone ??
The samba-2.2.7a-1es1 files at Charlie Bradys contrib site
ftp://ftp.e-smith.com/pub/e-smith/contrib/CharlieBrady/RPMS/i386-RH7.0/
appear to be newer than those in the v5.6 update 3 (according to the instal process).ie
samba-2.2.7-3.7.3es1 files at
ftp://ftp.e-smith.com/pub/e-smith/updates/5.6/Update3/RPMS/

Which are the more recent files and do those at Charlies site incorporate the security fixes ??

I already updated to the samba-2.2.7a-1es1 files before doing the 5.6 update 3.
The update 3 instal provcess said newer samba files were already installed
Which samba version should be installed to be safe from the security problems ??.

See previous post at
http://forums.contribs.org/index.php?topic=17072.msg66227#msg66227

Thanks & Regards
Ray Mitchell

[Robert]

Again, "rpm -q --changelog samba |less" will tell you. The Build Date as reported by "rpm -qi samba" will also give you a hint. Please do NOT automatically assume that these 2.2.7a packages are safe, just because rpm says they're newer than the 2.2.7 packages. It's only saying that because 2.2.7a comes after 2.2.7 in rpm's point of view. ALWAYS read changelogs and ALWAYS install official security updates. If 2.2.7a does not include the security fixes, you can "upgrade" to 2.2.7 with "rpm -Uvh --oldpackage samba-*"

[Charlie Brady]

Robert wrote:
>
> Again, "rpm -q --changelog samba |less" will tell you. The
> Build Date as reported by "rpm -qi samba" will also give you
> a hint. Please do NOT automatically assume that these 2.2.7a
> packages are safe, just because rpm says they're newer than
> the 2.2.7 packages.

And, indeed, those packages are not safe, and I've removed them.

For those wishing to use bleeding edge samba, I've placed 2.2.8a RPMs in my contrib area. Anyone else using 5.5 or 5.6 should use the official update from Mitel.  

Anyone using SME prior to 5.5 should upgrade to 5.6 or 5.5, should disable samba, or should find another source of a samba update. Mitel will not be providing one.

Regards

Charlie

[Ray Mitchell]

Thanks Robert & Charlie

All clear now !

Regards
Ray Mitchell

[Drew]

Charlie (others)

Are there procedures listed for updating Samba to 2.2.8a using the RPM's in the contrib area?  In addition - I assume that this Samba upgrade must be done "after" bringing SME 5.5 (note 5.5, not 5.6) up to the latest patch?

Regards,
Drew