samba - Feb 2015 - Samba and MS15-011?

cf. https://support.microsoft.com/kb/3000483

Seeing how this seems to affect both client and server side, is it
possible (and safe) to enable Mutual Authentication and Integrity as
explained in the KB entry?

-- 
Mit freundlichen Gr??en, / Best Regards,
Sven Schwedas
Systemadministrator
TAO Beratungs- und Management GmbH | Lendplatz 45 | A - 8020 Graz
Mail/XMPP: sven.schwedas at tao.at | +43 (0)680 301 7167
http://software.tao.at

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 648 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20150216/959b71c6/attachment.pgp>

On Mon, Feb 16, 2015 at 05:40:51PM +0100, Sven Schwedas
wrote:
> cf. https://support.microsoft.com/kb/3000483
> 
> Seeing how this seems to affect both client and server side, is it
> possible (and safe) to enable Mutual Authentication and Integrity as
> explained in the KB entry?
As far as I've been able to determine (and right
now the details of this are not clear) this is a
change in client, not server code.

Also Microsoft did not give us any security warning
to us that Samba was vulnerable to this (which
they have been so kind to do in the past for
other vulernabilities), so I'm currently assuming
this doesn't affect Samba servers - until I learn
more.

If we hear any different (or more details make
things clear that we are affected) we'll update
the lists as soon as we know anything.

Cheers,

	Jeremy.