Koozali.org: home of the SME Server

Announcements => Announcements => Topic started by: Daniel B. on April 14, 2016, 10:16:11 AM

Title: [IMPORTANT] SOLVED now OK to apply samba updates
Post by: Daniel B. on April 14, 2016, 10:16:11 AM

Several people are reporting an issue with the various samba updates released yesterday (2016-04-13) to fix the mediatic badlock vulnerability. After installing those updates, Windows clients members of your domain will loose the trust relationship, making any domain login impossible.
Please, do not apply the update for now, we need some time to investigate and work with our upstream vendor to get this fixed.
You can follow the bug here: https://bugs.contribs.org/show_bug.cgi?id=9448 and here: https://bugzilla.redhat.com/show_bug.cgi?id=1326918

Title: Re: [IMPORTANT] Do not apply samba updates
Post by: pfloor on April 15, 2016, 12:08:08 AM

If you have applied the updates and need to remove them, you can try these instructions posted by turandot in the SME Server 9.X forum...

Quote from: turandot on April 14, 2016, 08:05:57 PM

I was suffering from the problems described here: https://forums.contribs.org/index.php/topic,52402.0.html

To overcome the problems, uninstall the patches. This is achieved some commands on a root console. How to do that: https://access.redhat.com/solutions/64069

First check the ID number of the patch:

Code: [Select]

yum history
Then uninstall the related patches by

Code: [Select]

yum history undo <ID number>
To be 100% safe, I also applied

Code: [Select]

signal-event post-upgradeand

Code: [Select]

signal-event reboot
I hope this helps other users, I had to find it out  :lol:

turandot

Title: Re: [IMPORTANT] Do not apply samba updates
Post by: pfloor on April 15, 2016, 12:20:44 AM

In the meantime, if you need to install other critical updates before the Samba issue is resolved, you can install all other updates and exclude Samba updates with the following...

Code: [Select]

yum update --exclude samba*