openSUSE Security Update : samba (openSUSE-2012-109)

This script is Copyright (C) 2014 Tenable Network Security, Inc.

Synopsis :

The remote openSUSE host is missing a security update.

Description :

- Fix memory leak in parent smbd on connection;
CVE-2012-0817; (bso#8724); (bnc#743986).

- Use compliant license names for all packages.

- Update to 3.6.2.

See WHATSNEW.txt from the main tar ball or the samba.changes file for
more details.

- s3-spoolss: Pass the right pointer type; (bso#4942);

- Use correct license, LGPLv3+ for libwbclient packages.

- When returning an ACL without SECINFO_DACL requested, we
still set SEC_DESC_DACL_PRESENT in the type field;

- Prefix print$ path on driver file deletion; (bso#8697);

- Fix printer_driver_files_in_use() call ordering;
(bso#4942); (bnc#742504).

- Buffer overflow issue with AES encryption in samba
traffic analyzer; (bso#8674).

- NT ACL issue; (bso#8673).

- Deleting a symlink fails if the symlink target is
outside of the share; (bso#8663).

- connections.tdb - major leak with SMB2; (bso#8710).

- Renaming a symlink fails if the symlink target is
outside of the share; (bso#8664).

- Intermittent print job failures caused by character
conversion errors; (bso#8606).

- ads_keytab_verify_ticket mixes talloc allocation with
malloc free; (bso#8692).

- libcli/cldap: fix a crash bug in
cldap_socket_recv_dgram(); (bso#8593).

- s3:lib/ctdbd_conn: try ctdbd_init_connection() as root;

- s3-printing: fix migrate printer code; (bso#8618).

- Packet validation checks can be done before length
validation causing uninitialized memory read;

- net memberships usage info was wrong; (bso#8687).

- s3-libsmb: Don't duplicate kerberos service tickets;

- Recvfile code path using splice() on Linux leaves data
in the pipe on short write; (bso#8679).

- s3-winbind: Fix segfault if we can't map the last user;

- vfs_acl_xattr and vfs_acl_tdb modules can fail to add
inheritable entries on a directory with no stored ACL;

- s3/doc: document the ignore system acls option of
vfs_acl_xattr and vfs_acl_tdb; (bso#8652).

- Winbind can't receive any user/group information;

- s3-winbind: Add an update function for winbind cache;

- s3: Attempt to fix the vfs_commit module.

- POSIX ACE x permission becomes rx following mapping to
and from a DACL; (#bso#8631).

- s3:libsmb: only align unicode pipe_name; (bso#8586).

- s3-winbind: Don't fail on users without a uid;

- Crash when trying to browse samba printers; (bso#8623).

- talloc: double free error; (bso#8562).

- cldap doesn't work over ipv6; (bso#8600).

- s3:libsmb: fix cli_write_and_x() against OS/2 print
shares; (bso#5326).

- SMB2: not granting credits for all requests in a
compound request; (bso#8614).

- smb2_flush sends uninitialized memory; (bso#8579).

- Password change settings not fully observed; (bso#8561).

- s3:smb2_server: grant credits in async interim
responses; (bso#8357).

- s3:smbd: don't limit the number of open dptrs for smb2;

- samr_ChangePasswordUser3 IDL incorrect; (bso#8591).

- idmap_autorid does not have allocation pool; (bso#8444).

- Add systemd service files.

- s3:libsmb: the workgroup in the non-extended-security
negprot is not aligned; (bso#8573).

- s3-build: Fix inotify detection; (bso#8580).

- SMB2 doesn't handle compound request headers in the same
way as Windows; (#bso8560).

- Disconnecting clients swamp the logs; (bso#8585).

- s3-netlogon: Fix setting the machinge account password;

- winbind_samlogon_retry_loop ignores logon_parameters
flags; (#bso8548).

- smbclient posix_open command fails to return correct
info on open file; (bso#8542).

- readlink() on Linux clients fails if the symlink target
is outside of the share; (bso#8541).

- s3-netapi: remove pointless use_memory_krb5_ccache;

- s3:Makefile: make DSO_EXPORTS_CMD more portable;

- s3:registry: fix the test for a REG_SZ blob possibly
being a zero terminated ucs2 string; (bso#8528).

- Make VFS op 'streaminfo' stackable; (bso#8419).

- Fix incorrect perfcount array length calculations;

- BuildRequire autoconf to avoid implicit dependency for
post-11.4 systems.

- Remove call to suse_update_config macro for post-11.4

- Use for the ldapsmb source location.

- Fixing libsmbsharemode dependency on ldap and krb5 libs
in Makefile; (bnc #729516).

- Add ldap to Should-Start and Stop of the smb init
script; (bnc#730046).

- Fix smbd srv_spoolss_replycloseprinter() segfault;
(bso#8384); (bnc#731571).

- Fix segfault in pam_sm_authenticate();

- Fix smbclient >8GB tars on big endian machines;
(bso#563); (bnc#726145).

- Fix typo in net ads join output; (bnc#713135).

- Add 'ldapsam:login cache' parameter to allow explicit
disabling of the login cache; (bnc#723261).

- Fix samba duplicates file content on appending. Move
posix case semantics out from under the VFS; (bso#6898);

- Make winbind child reconnect when remote end has closed,
fix failing sudo; (bso#7295); (bnc#569721).

- Fix printing from Windows 7 clients; (bso#7567);

- Update pidl and always compile IDL at build time;

- Abide by print$ share 'force user' & 'force group'
settings when handling AddprinterDriver and
DeletePrinterDriver requests; (bso#7921); (bnc#653353).

See also :

Solution :

Update the affected samba packages.

Risk factor :

Medium / CVSS Base Score : 5.0

Family: SuSE Local Security Checks

Nessus Plugin ID: 74545 ()

Bugtraq ID:

CVE ID: CVE-2012-0817

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now