December 2007 - openSUSE Security - openSUSE Mailing Lists

[opensuse-security] Verifying authenticity of Community Repositories
by nordi 03 Jan '08

03 Jan '08

Hi! Today I wanted to add some community repositories as installation sources, more specifically stuff from the OpenSuse Build Service. Yast complained about an untrusted key, since the public key of the build service is not included in the distribution (not to be confused with the build key, which is included). Of course I could just press the "OK" button, or download the key from [1], import it and never be bothered again. But that key has no signatures and is transmitted via http, so I still do not know if I have the right key. Is there any way of securely retrieving the authentic public key of the build service without traveling to Nuremberg? How is the average user supposed to do that? Happy Holidays nordi [1] http://download.opensuse.org/openSUSE-Build-Service.asc --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

4 4

[opensuse-security] how I can block attacks DoS with Susefirewall2
by troxlinux 30 Dec '07

30 Dec '07

hi list, few days ago I had an attack in my networks , of several pc infected with virus they sent many connections to my port 25 of my mail server, like I can avoid these attacks ? I was thinking of limiting the connections per seconds at port 25 , like could make this with susefirewall2 ? greetings rickygm --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

2 1

[opensuse-security] ssh-ing to an old suse.
by Carlos E. R. 27 Dec '07

27 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I have an old computer with suse 7.3 on it (the latest it can use: it is a pentium classic with 32 MB). I used the other day to ssh to my main computer (opensuse 10.3) and kill a process that had locked the keyboard). It has it's small uses. Today I tried to ssh to it, and i can't: the ssh session stays for ever like this: cer@nimrodel:~> ssh telperion.valinor never asking for the password. What is going on? It worked with 10.2, I think. I know it is not a network issue. It may be related to an authentication method that has changed defaults in 10.3, but I don't know what exactly. There is no entry in the logs. - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFHQZUDtTMYHG2NR9URAlG7AJ4pLwjrRwgeT/pzMrCNOabhhfSz8QCbB1NM AAjxA7IdKLe3VV6owEpKlKA= =a/67 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

5 8

[opensuse-security] multipath-tools SLES10: where is that src.rpm?
by Lars Ellenberg 20 Dec '07

20 Dec '07

we observer spurious path failures, and suspect a timeout problem with multipathd on SLES10, multipath-tools-0.4.7-34.23 now, I'd like to instrument that multipath thing, i.e. add additional log statements in approptiate locations. unfortunately I am not able to locate the multipath-tools-0.4.7-34.23.src.rpm (the download link on the - arguably cumbersome to navigate - novell site links to some 0.4.6 src.rpm, maybe I'm just to blind to navigate that site properly) to not compare apples with oranges, I'd really like to nail down the problem in the exact version we use here, otherwise I could just "upgrade" to upstream 0.4.8. but this is SLES10, not gentoo, so... please, anyone who knows, where can I find the multipath-tools-0.4.7-34.23.src.rpm? thanks, -- : Lars Ellenberg Tel +43-1-8178292-55 : : LINBIT Information Technologies GmbH Fax +43-1-8178292-82 : : Vivenotgasse 48, A-1120 Vienna/Europe http://www.linbit.com : --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

3 6

[opensuse-security] Encripted filesystem write blocks the system (10.3)
by Carlos E. R. 19 Dec '07

19 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have an encripted filesystem inherited from 10.2 and before. I have this line in fstab: /biggy/crypta_f.mm.x /mnt/crypta.mm.x xfs noauto,user,noatime,nodiratime,loop,encryption=twofish256 1 4 Reading from this filesystem works (I'm copying it elsewhere now). Writing to this filesystem, from another similarly encripted filesystem, large files (between 300 and 400 MB), locks the console where the copy is having place. The copy process stops. It is unkillable. Umount of that filesystem locks (and umount is unkillable). Reboot filesystem locks. If I try to "ls -l" the destination dir of the copy (that is locked, frozen) also freezes. I have to lazy umount ("umount -l /mountpoints &") all the mountpoints I can, and then try to reboot (which hangs) and then poweroff the machine forcefully. There is absolutely nothing in the logs relative to this problem (I know how to look into logs). I have fsck the filesystem, nothing: nimrodel:~ # losetup -e twofish256 /dev/loop2 /biggy/crypta_f.mm.x Password: nimrodel:~ # file -s /dev/loop2 /dev/loop2: SGI XFS filesystem data (blksz 4096, inosz 256, v2 dirs) nimrodel:~ # xfs_check /dev/loop2 ERROR: The filesystem has valuable metadata changes in a log which needs to be replayed. Mount the filesystem to replay the log, and unmount it before re-running xfs_check. If you are unable to mount the filesystem, then use the xfs_repair -L option to destroy the log and attempt a repair. Note that destroying the log may cause corruption -- please attempt a mount of the filesystem before doing this. nimrodel:~ # mount /dev/loop2 /mnt/crypta.mm.x/ nimrodel:~ # umount /dev/loop2 nimrodel:~ # xfs_check /dev/loop2 nimrodel:~ # No errors. I'm aware that the encription filesystems have changed in 10.3, but the only document I have is the release notes. Probably I would have to use a different method than losetup, but I have no idea which. An encripted filesystem I see it uses devmap. But notice that the problem arises from a filesystem mounted directly from fstab - shouldn't this method be used now anymore? In any case, the "classic" method should freeze the computer, as it does :-? - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFHTiu2tTMYHG2NR9URAr5gAJwNybIdLLBs5NTiirEehsYUOUzKOwCeN0s3 +FOv7HWC2FOfojUrCKae3r4= =WgTn -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

3 5

[opensuse-security] SUSE Security Announcement: samba (SUSE-SA:2007:068)
by Thomas Biege 14 Dec '07

14 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: samba Announcement ID: SUSE-SA:2007:068 Date: Wed, 12 Dec 2007 09:00:00 +0000 Affected Products: SUSE LINUX 10.0 SUSE LINUX 10.1 openSUSE 10.2 openSUSE 10.3 UnitedLinux 1.0 SuSE Linux Enterprise Server 8 SuSE Linux Openexchange Server 4 SuSE Linux Desktop 1.0 SuSE Linux Standard Server 8 SuSE Linux School Server SUSE LINUX Retail Solution 8 SUSE SLES 9 Novell Linux Desktop 9 Open Enterprise Server Novell Linux POS 9 SUSE Linux Enterprise Desktop 10 SP1 SLE SDK 10 SP1 SUSE Linux Enterprise Server 10 SP1 Vulnerability Type: remote code execution Severity (1-10): 7 SUSE Default Package: no Cross-References: CVE-2007-6015 Content of This Advisory: 1) Security Vulnerability Resolved: buffer overflow fixed in send_mailslot() Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: none 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion The Samba suite is an open-source implementatin of the SMB protocol. This update of samba fixes a buffer overflow in function send_mailslot() that allows remote attackers to overwrite the stack with 0 (via memset(3)) by sending specially crafted SAMLOGON packets. This bug can only be triggered if option "domain logon" is enabled. 2) Solution or Work-Around Please install the update. 3) Special Instructions and Notes restart the samba daemon 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv <file.rpm> to apply the update, replacing <file.rpm> with the filename of the downloaded RPM package. x86 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/cifs-mount-3… 0e5535e4f9c58befed9342a7ab1189ab http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/ldapsmb-1.34… 2a0a8ce1d69d105590e054cc301085e6 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libmsrpc-3.0… 9354979f15b5abef17072f0203745ddf http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libmsrpc-dev… 74629f5f4b761042b30d9336c97e5b6f http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbclient… dbcbee4977b3beeb2a46e5b56003604c http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbclient… 7a6c5f65bb9aed832cec9221e41f76ef http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbsharem… f04c0399479ecc681daa1330a187009b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbsharem… 92f8de627f39372775c46cc588000e31 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-3.0.26… 1ee63cc24bb7862c3f80a492883a6e82 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-client… b7dcfa6d0918bb8b872901d14360824e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-devel-… 4a4c54c5e1bdc81d1072d547de7568bf http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-krb-pr… 84c34910588e03462d122272b12abd22 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-python… c0da4925b38c010df8ea8cfbe22b17b8 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-vscan-… 68cdda40cb0ccd5bd66bc6d0c6a967b9 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-winbin… 93cdaa0a3be9f28b1f72606cd7b13dfe openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/cifs-mount-3.0.23d-19.12.i… afaa4c73ed2b630be1851db84b9c125d ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/ldapsmb-1.34b-27.10.i586.r… 7666f91e8d67dc1f8bee49e4cb0901eb ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libmsrpc-3.0.23d-19.12.i58… 1601f1584035d7cb330067365af4acb4 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libmsrpc-devel-3.0.23d-19.… b36d408ad52e39846e24c92546ff0517 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libsmbclient-3.0.23d-19.12… 3997a33f24a9f6c7fa02e5d4747f134f ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libsmbclient-devel-3.0.23d… 6e3587e997434f4dab0c3cd531cbcc98 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-3.0.23d-19.12.i586.r… b6b9ad383af96ca2cd910785db95048d ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-client-3.0.23d-19.12… b0d9d68df8b89a51a831d3cfa742ce71 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-krb-printing-3.0.23d… 37f8f48ac1843b8e97a7c987d7079e64 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-pdb-3.0.23d-19.12.i5… 9b6c38491f7468a6a7615d436898fa5b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-python-3.0.23d-19.12… e4ab347d68622fc88ddc67a93d626eaf ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-vscan-0.3.6b-98.10.i… ce4f8adcdbf52a0d5dd7f935e69639af ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-winbind-3.0.23d-19.1… e955a157680e5b6247c18bc5034c82d1 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/cifs-mount-3.0.22-13.38.i5… 2f05943a1460501e9ca60a4bd549da08 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/ldapsmb-1.34a-18.34.i586.r… cd3711d293c3fe75869ec5988cc67573 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libmsrpc-3.0.22-13.38.i586… 686c003b70948a3be1fd08abfa1f3dcc ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libmsrpc-devel-3.0.22-13.3… d1bcf481db15df72b33a08c3d7c3e5d9 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libsmbclient-3.0.22-13.38.… 6b57bda44d4f6ab9bb8f461d822f5788 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libsmbclient-devel-3.0.22-… 7b273fe131866037e60772b159b1c5b0 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-3.0.22-13.38.i586.rpm 845322afd91dddf6ac2dc8e0fbc39945 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-client-3.0.22-13.38.… 1c55254ce8e2deeae55b091bb8e94f87 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-pdb-3.0.22-13.38.i58… 7e2a2c98c8aca6585fe596e2a54eb88d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-python-3.0.22-13.38.… 250037bcd87bc1bc224777c8e851228f ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-vscan-0.3.6b-42.67.i… b30796df04b4a725e8d84f3f67c59db1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-winbind-3.0.22-13.38… 34acf5453bb5af282aef0ecd1f7abdb3 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/cifs-mount-3.0.20b-3.… aa3510d45fee741cbc686ea61c80ec54 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/ldapsmb-1.33-6.19.i58… 350c28feca2c5df9aa60126d7e1bb307 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/libsmbclient-3.0.20b-… e3db796664063204bc235d770050dc55 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/libsmbclient-devel-3.… 2755f1fb5543a12616e6e5d63bd02fd9 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-3.0.20b-3.19.i5… 6aff05575f28129adc6854e9bbb19d2b ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-client-3.0.20b-… 5b46e739f2710e67832bf349b7d701de ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-doc-3.0.20b-3.1… f13a8777d576b78696f5093cc7ee29ff ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-pdb-3.0.20b-3.1… d3eab9eace2d9f4f4da161aeb1ad7a16 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-python-3.0.20b-… 720af50848e8fda98933c816a7ad556e ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-vscan-0.3.6b-4.… 36ef7b26083b51ade9b0faf74c916834 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-winbind-3.0.20b… 51f4572af72d962929017527b7d5efdd Platform Independent: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/noarch/samba-doc-… 39467dee7de97fbfe021ad192ef3d572 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/noarch/samba-doc-3.0.23d-19.9.n… a1b924be38bc5da02cf397271403fb15 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/samba-doc-3.0.22-20.52.n… 5926d68856a69a339b6f9932ccd8b1fd Power PC Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/cifs-mount-3.… 0cd62968d1c4aa6d9211c3439a117a68 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/ldapsmb-1.34b… a6f9195f03ab26487b52f60fd78698ed http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libmsrpc-3.0.… 6a185e53ce56877e6ce11553820eabe7 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libmsrpc-deve… 9a34657070463217e9e9df9687143d60 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbclient-… c5f7822d14047a6bcc5f9be210ef6e7b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbclient-… a3b16e3141481d5f1790324f03833d61 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbsharemo… c42d71369f0149e83c55ebb7181588a3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbsharemo… 56bfac393c26f8ed185cf288c0ec3284 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-3.0.26a… 07d93ee1ba0f8ba800dd225d4b9f952a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-client-… 2b3b282ca2d9a71ac62ab4419345016b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-devel-3… 1f01b5a13517cc5ccf12528c8b50d68a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-krb-pri… 05a65ebf61b618b1c4c4db4ab5f8ca33 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-python-… f3be951b3cfdc871ff36e592d498e4b3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-vscan-0… 74292b93b66f7b2bbefb5187adfed6e4 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-winbind… 4b281ee450b53b2982e5183e35b2f5c9 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/cifs-mount-3.0.23d-19.12.pp… f2444c5e913e2d84a6cded6c5c794ee6 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/ldapsmb-1.34b-27.10.ppc.rpm 78c64dc20ebb8a3a6a175f15d504d92c ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libmsrpc-3.0.23d-19.12.ppc.… db9db8c1ecfc417ec2f2720d42940d70 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libmsrpc-devel-3.0.23d-19.1… 58a63d9a08dcd9a13129fd1f880fa1b6 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libsmbclient-3.0.23d-19.12.… d64260ddfa5bc6b5e3c9c3c2447c8f0f ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libsmbclient-devel-3.0.23d-… 5c7c53ccd7b10d89165bcbed29aded9e ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-3.0.23d-19.12.ppc.rpm eed181f7254fed5b96356607c6d03389 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-client-3.0.23d-19.12.… 026fba74fd7dceab4eab79eb8bef8d45 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-krb-printing-3.0.23d-… 36877bb2af6e0cc2acef236e242e5b52 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-pdb-3.0.23d-19.12.ppc… d28ad04339a82d79124ad9abedd2dcf6 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-python-3.0.23d-19.12.… f42c732902e8af6717129cc14a6a974f ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-vscan-0.3.6b-98.10.pp… 4ee6aa7c5a5dfb0fc0bf91c5ce170b18 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-winbind-3.0.23d-19.12… 98521632e3273836892abfc9a8850ec8 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/cifs-mount-3.0.22-13.38.ppc… f0e56f33899d4868cd4ae6ac7d6eacab ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/ldapsmb-1.34a-18.34.ppc.rpm 481cabc078d52395d07a03afb9260a43 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libmsrpc-3.0.22-13.38.ppc.r… f460869c64684d95096e1331586dacdb ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libmsrpc-devel-3.0.22-13.38… acf03549cb101d7173c0412e12edad1d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libsmbclient-3.0.22-13.38.p… d53304f19b32f5b93a62e0efb69cb039 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libsmbclient-devel-3.0.22-1… 205ac90f2737fd0d12bec7c21c718a49 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-3.0.22-13.38.ppc.rpm 88304fbd17ff4f68bff897f83a4eed71 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-client-3.0.22-13.38.p… e85c92e8e1069b727de46dc8dba21178 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-pdb-3.0.22-13.38.ppc.… 7310693b8985014d3c0e49be93108507 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-python-3.0.22-13.38.p… c54bf91f4bf84ee9087aa5f6631c849e ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-vscan-0.3.6b-42.67.pp… b0f48534514cbfbcccbcaef082c279ee ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-winbind-3.0.22-13.38.… 75c135d1bc2c0242ee467b1ff61da8e8 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/cifs-mount-3.0.20b-3.1… 73b81b3856589b55b94fda3dc519f9ec ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/ldapsmb-1.33-6.19.ppc.… 69e4ba509db113d219bd6d6b4514d74f ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/libsmbclient-3.0.20b-3… 67be23ebf3c5690c69daa724c11ca546 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/libsmbclient-devel-3.0… 4ad9822904c9c1a730ea98ad94b6912c ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-3.0.20b-3.19.ppc… 132d85fe5bafdde591937e905ed1dfdf ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-client-3.0.20b-3… 28c59d931ef479e419382b1f1c1c10ca ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-doc-3.0.20b-3.19… 21b923582b3179d48eee80a6204a9f5d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-pdb-3.0.20b-3.19… 68c41fccb41731ab0b82152c42503fb7 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-python-3.0.20b-3… 3317974bcf40ecd486874ed515dfbdaa ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-vscan-0.3.6b-4.1… bed5f00541dbf418ee2c266daa92c6a7 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-winbind-3.0.20b-… f378061ff72f1d7f2e2512d291575cb9 x86-64 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/cifs-mount… af0f7a523a45b6db682fe22baa726478 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/ldapsmb-1.… c74da5b770b833e83c2de23763e19d9b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libmsrpc-3… ba8a8c86b2abc2dd07638a14acf8a749 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libmsrpc-d… 8502b0e45b25df6153622a2ec680d2c6 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbclie… a2d40bf47101679f432acf277699ab1c http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbclie… e2261330c01aa2cd610c01c31a3e71b3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbclie… 8ac32adf2af43277ad39df05885cf004 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbshar… 9c92b0ad6910b5a91801118fd53a3f14 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbshar… c6b097b4292fec495b59ba09354b12cf http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-3.0.… b55934f29d8a486d2abc3b2b4536e7d3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-32bi… e67397a0cdcca4ffe33d458a078a71ab http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-clie… 216ec6be569f63742ecbf4a787e1824b http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-clie… 068f0ceb354a0f0741c1f1a743710dc0 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-deve… c138f629b99d53769e8f18581578991d http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-krb-… 3a001c4d1796128725e1ead04732ece1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-pyth… d3cad141787e3e564d2bfd88823261e3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-vsca… 3479f65df3061ec6fe2f4c5f5d3e4364 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-winb… b24df7dd9097e4c35385fa60d638aea2 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-winb… 08ca3c1773eccba6cebe600f0198bc57 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/cifs-mount-3.0.23d-19.12… 9081c59e9c88c537f7fecb4999070fa1 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/ldapsmb-1.34b-27.10.x86_… 5b5d5cc40f7b51b5473c2effec7a961d ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libmsrpc-3.0.23d-19.12.x… b5f5bbd929ccbfb4fdeef987f1a0a7f2 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libmsrpc-devel-3.0.23d-1… 3e0f3ac7cbcc182a66f99ce147812123 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libsmbclient-3.0.23d-19.… 64377e86d45de128b22af942cab575ea ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libsmbclient-32bit-3.0.2… 8e21116ddd67f748ba49b453e64f16af ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libsmbclient-devel-3.0.2… 36a4c1b65cfdd027a4726b85df6d7e75 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-3.0.23d-19.12.x86_… 6bd4864e67f9450d119029b8744289ad ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-32bit-3.0.23d-19.1… 514f048e68196dc85787ed84a209be48 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-client-3.0.23d-19.… cec9ba17ea0abb1962bcbc9b8791f72a ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-client-32bit-3.0.2… af7c9a1aed49df4020a7720f5f5721f0 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-krb-printing-3.0.2… 8d1faa3f69aeaaf9cc20d22c9dc369d9 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-pdb-3.0.23d-19.12.… 39e1bdfdcca7e49a911efb00f33717e7 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-python-3.0.23d-19.… e7ac921e2ed73fce7463b0dbb2b96461 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-vscan-0.3.6b-98.10… 106e3660b76b9499501a0e61b01059c8 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-winbind-3.0.23d-19… 43465347bf1d998eeb3e40c3b50995a6 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-winbind-32bit-3.0.… 44fa9cfafb953cdc2e183dc8d6937acb SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/cifs-mount-3.0.22-13.38.… f399c965065c9d15fa9eb6c25d75dfd0 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/ldapsmb-1.34a-18.34.x86_… 6ebe4219211e90da6771db9c5fa17e65 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libmsrpc-3.0.22-13.38.x8… d268f0edf1ec53bdfdcc9193dab34a1a ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libmsrpc-devel-3.0.22-13… a60678ede2d3c252b2dbc907585f9059 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libsmbclient-3.0.22-13.3… 5de55c73b1addb72fec37b90ee33b5ab ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libsmbclient-32bit-3.0.2… d5e9f4362f7b93a23a89509b5529fab7 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libsmbclient-devel-3.0.2… f0847fd830347f01686ff8ff10f01cfb ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-3.0.22-13.38.x86_6… b3b21034e364084d9a0437943b126007 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-32bit-3.0.22-13.38… c01154efe5c8703ba2eefb765ad92c8b ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-client-3.0.22-13.3… fe1c09a1bd074c5b5eafdffa6dbe8690 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-client-32bit-3.0.2… 754ec0cfbd5dc4f698c8d5d1ee6fac6b ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-pdb-3.0.22-13.38.x… c657a9008ec9c024efbb58938e922c73 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-python-3.0.22-13.3… 7b3a2dab4dcd936e9e9cc3165a9d5a9f ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-vscan-0.3.6b-42.67… e87a1a9191785d22210da556bd31da5f ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-winbind-3.0.22-13.… dff37b747c895070babb9638702a3750 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-winbind-32bit-3.0.… 827202c10aeeb251e2e40a0065abb0ab SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/cifs-mount-3.0.20b-… 2aad8134654b11f9fdfcb658ed8637a5 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/ldapsmb-1.33-6.19.x… 723e5b47831f247b8f5e37dca0a2bfdb ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/libsmbclient-3.0.20… 4a5a603903cb13158895e26baec491c5 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/libsmbclient-32bit-… 29814d08bf2348e753a19819df3beb14 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/libsmbclient-devel-… 4bb34360311fad4524d5167a025b145c ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-3.0.20b-3.19.… 99aaf715ae30f7774842f1eba35820f3 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-client-3.0.20… c2646918e6044d0052c36dab4ffd0e93 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-doc-3.0.20b-3… 93ffe07900ccd4c5d8e0cbacfc5e5403 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-pdb-3.0.20b-3… 5226a870eb989b475cc6a871cc024cf3 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-python-3.0.20… 73adc1b93d86c22df501076a9a41bb68 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-vscan-0.3.6b-… a0f2c6fbcb92acc477370ff5609e177c ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-winbind-3.0.2… 35e2801afd91d1fd4f1663c61aaa7fb4 Sources: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/samba-3.0.26a… 0c51e5e8c284b4a4d92e75c8e8eb8831 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/samba-doc-3.0… 482dcc2dfce7d00c253ace3465400e6e openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/samba-3.0.23d-19.12.src.rpm 6d6bcf35be28199114f4e43bba61f43b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/samba-doc-3.0.23d-19.9.nosr… 4ed2b2447d2ef68f982e803270dc9b1b SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/samba-3.0.22-13.38.src.rpm 3319209b169a2f45f066ab8934148b88 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/samba-doc-3.0.22-20.52.nosr… bb2e30f3bbcd5181e0d6ad6b6868d225 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/samba-3.0.20b-3.19.src… ae95f8c0dc92a4096ff84ab83c8753fd Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web: UnitedLinux 1.0 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SuSE Linux Openexchange Server 4 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… Open Enterprise Server http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… Novell Linux POS 9 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… Novell Linux Desktop 9 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SuSE Linux Enterprise Server 8 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SuSE Linux Standard Server 8 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SuSE Linux School Server http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SUSE LINUX Retail Solution 8 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SuSE Linux Desktop 1.0 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SUSE Linux Enterprise Server 10 SP1 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SLE SDK 10 SP1 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SUSE Linux Enterprise Desktop 10 SP1 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… SUSE SLES 9 http://support.novell.com/techcenter/psdb/62b9c0440dd934e47058664687d5b084.… ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: none ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify <file> replacing <file> with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made <DATE> using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team <security(a)suse.de>" where <DATE> is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or RPM package: 1) Using the internal gpg signatures of the rpm package 2) MD5 checksums as provided in this announcement 1) The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig <file.rpm> to verify the signature of the package, replacing <file.rpm> with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from build(a)suse.de with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and at the end of this announcement. 2) If you need an alternative means of verification, use the md5sum command to verify the authenticity of the packages. Execute the command md5sum <filename.rpm> after you downloaded the file from a SUSE FTP server or its mirrors. Then compare the resulting md5sum with the one that is listed in the SUSE security announcement. Because the announcement containing the checksums is cryptographically signed (by security(a)suse.de) the checksums show proof of the authenticity of the package if the signature of the announcement is valid. Note that the md5 sums published in the SUSE Security Announcements are valid for the respective packages only. Newer versions of these packages cannot be verified. - SUSE runs two security mailing lists to which any interested party may subscribe: opensuse-security(a)opensuse.org - General Linux and SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security+subscribe(a)opensuse.org>. opensuse-security-announce(a)opensuse.org - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security-announce+subscribe(a)opensuse.org>. ===================================================================== SUSE's security contact is <security(a)suse.com> or <security(a)suse.de>. The <security(a)suse.de> public key is listed below. ===================================================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, the clear text signature should show proof of the authenticity of the text. SUSE Linux Products GmbH provides no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team <security(a)suse.de> pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2 (GNU/Linux) mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12CohGBBARAgAGBQI7HmHDAAoJEJ5A4xAACqukTlQAoI4QzP9yjPohY7OU F7J3eKBTzp25AJ42BmtSd3pvm5ldmognWF3Trhp+GYkAlQMFEDe3O8IWkDf+zvyS FQEBAfkD/3GG5UgJj18UhYmh1gfjIlDcPAeqMwSytEHDENmHC+vlZQ/p0mT9tPiW tp34io54mwr+bLPN8l6B5GJNkbGvH6M+mO7R8Lj4nHL6pyAv3PQr83WyLHcaX7It Klj371/4yzKV6qpz43SGRK4MacLo2rNZ/dNej7lwPCtzCcFYwqkiiEYEEBECAAYF AjoaQqQACgkQx1KqMrDf94ArewCfWnTUDG5gNYkmHG4bYL8fQcizyA4An2eVo/n+ 3J2KRWSOhpAMsnMxtPbBmQGiBDnu9IERBACT8Y35+2vv4MGVKiLEMOl9GdST6MCk YS3yEKeueNWc+z/0Kvff4JctBsgs47tjmiI9sl0eHjm3gTR8rItXMN6sJEUHWzDP +Y0PFPboMvKx0FXl/A0dM+HFrruCgBlWt6FA+okRySQiliuI5phwqkXefl9AhkwR 8xocQSVCFxcwvwCglVcOQliHu8jwRQHxlRE0tkwQQI0D+wfQwKdvhDplxHJ5nf7U 8c/yE/vdvpN6lF0tmFrKXBUX+K7u4ifrZlQvj/81M4INjtXreqDiJtr99Rs6xa0S cZqITuZC4CWxJa9GynBED3+D2t1V/f8l0smsuYoFOF7Ib49IkTdbtwAThlZp8bEh ELBeGaPdNCcmfZ66rKUdG5sRA/9ovnc1krSQF2+sqB9/o7w5/q2qiyzwOSTnkjtB UVKn4zLUOf6aeBAoV6NMCC3Kj9aZHfA+ND0ehPaVGJgjaVNFhPi4x0e7BULdvgOo AqajLfvkURHAeSsxXIoEmyW/xC1sBbDkDUIBSx5oej73XCZgnj/inphRqGpsb+1n KFvF+rQoU3VTRSBQYWNrYWdlIFNpZ25pbmcgS2V5IDxidWlsZEBzdXNlLmRlPohi BBMRAgAiBQJA2AY+AhsDBQkObd+9BAsHAwIDFQIDAxYCAQIeAQIXgAAKCRCoTtro nIAKypCfAJ9RuZ6ZSV7QW4pTgTIxQ+ABPp0sIwCffG9bCNnrETPlgOn+dGEkAWeg KL+IRgQQEQIABgUCOnBeUgAKCRCeQOMQAAqrpNzOAKCL512FZvv4VZx94TpbA9lx yoAejACeOO1HIbActAevk5MUBhNeLZa/qM2JARUDBRA6cGBvd7LmAD0l09kBATWn B/9An5vfiUUE1VQnt+T/EYklES3tXXaJJp9pHMa4fzFa8jPVtv5UBHGee3XoUNDV wM2OgSEISZxbzdXGnqIlcT08TzBUD9i579uifklLsnr35SJDZ6ram51/CWOnnaVh UzneOA9gTPSr+/fT3WeVnwJiQCQ30kNLWVXWATMnsnT486eAOlT6UNBPYQLpUprF 5Yryk23pQUPAgJENDEqeU6iIO9Ot1ZPtB0lniw+/xCi13D360o1tZDYOp0hHHJN3 D3EN8C1yPqZd5CvvznYvB6bWBIpWcRgdn2DUVMmpU661jwqGlRz1F84JG/xe4jGu zgpJt9IXSzyohEJB6XG5+D0BuQINBDnu9JIQCACEkdBN6Mxf5WvqDWkcMRy6wnrd 9DYJ8UUTmIT2iQf07tRUKJJ9v0JXfx2Z4d08IQSMNRaq4VgSe+PdYgIy0fbj23Vi a5/gO7fJEpD2hd2f+pMnOWvH2rOOIbeYfuhzAc6BQjAKtmgR0ERUTafTM9Wb6F13 CNZZNZfDqnFDP6L12w3z3F7FFXkz07Rs3AIto1ZfYZd4sCSpMr/0S5nLrHbIvGLp 271hhQBeRmmoGEKO2JRelGgUJ2CUzOdtwDIKT0LbCpvaP8PVnYF5IFoYJIWRHqlE t5ucTXstZy7vYjL6vTP4l5xs+LIOkNmPhqmfsgLzVo0UaLt80hOwc4NvDCOLAAMG B/9g+9V3ORzw4LvO1pwRYJqfDKUq/EJ0rNMMD4N8RLpZRhKHKJUm9nNHLbksnlZw rbSTM5LpC/U6sheLP+l0bLVoq0lmsCcUSyh+mY6PxWirLIWCn/IAZAGnXb6Zd6Tt IJlGG6pqUN8QxGJYQnonl0uTJKHJENbI9sWHQdcTtBMc34gorHFCo1Bcvpnc1LFL rWn7mfoGx6INQjf3HGQpMXAWuSBQhzkazY6vaWFpa8bBJ+gKbBuySWzNm3rFtT5H RKMWpO+M9bHp4d+puY0L1YwN1OMatcMMpcWnZpiWiR83oi32+xtWUY2U7Ae38mMa g8zFbpeqPQUsDv9V7CAJ1dbriEwEGBECAAwFAkDYBnoFCQ5t3+gACgkQqE7a6JyA CspnpgCfRbYwxT3iq+9l/PgNTUNTZOlof2oAn25y0eGi0371jap9kOV6uq71sUuO =ypVs - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iQEVAwUBR1+gi3ey5gA9JdPZAQKKAQf/QXi2ziQFAuIA34rMp+FNIen6YZ2drup3 hJzkzUInNQEFN6Ghnf/pcThTQnoc/QknxR8kOdNIInf0UgjqJOyGTqzJJxgKE0Ie +nlU1uEelS2UfeiIoa4vFRW8e1AeIcbKAjStA1fhAEfbm+DP4pxuJbZ2cvTVNoU8 7GeppMsPfHXk9tJM17rg16pdImWPLElAGA9183ir6Nuj31RsIzE7cmHpFKnSKLX4 jWv2B29hMmqejliuvH2sv+rlOgQOhwk1fS9QyZt+TVitLJhEAEag46Y1vHlb2qnK tGsMsUvj7i7JZCMfXEsB1cV6O3YFVcMSo1Bvdta4MdzFaHnuuif+GA== =NwjI -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

3 3

[opensuse-security] LUKS and its master key
by Jochen+opensuse-security＠Hayek.name 12 Dec '07

12 Dec '07

I found LUKS recently through SUSE Linux 10.3, and the other night a read an article in c't 2006/11. I can't seriously appreciate the technical internals, as I'm not too compentent there. Anyway: Kudos to Clemens Fruhwirth! But I am not really sure, whether I can trust, what I read in that article regarding the master key, spefically that the master key can be read from the LUKS volume by the sys admin without any difficulties. Does that really mean, that as soon as somebody gains control over my computer with a mounted LUKS encrypted (external) disc and he also manages to gain root priviliges, that he can retrieve the necessary information, to mount that disc himself with LUKS-means again?!? I mean without me passing the keys to him. If that is seriously so, I think I will have to find myself another disc encryption toolset, as I cannot tolerate, that intruders can deal with my personal data without my explicit permission and support. Whether those intruders have governmental permissions, I don't f...ing care. I appreciate your serious comments. J. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

6 11

[opensuse-security] LUKS encrypted swap
by Christian Boltz 12 Dec '07

12 Dec '07

Hello, I wonder how I should implement LUKS encrypted swap with random encryption at every boot. (Yes, I know that I shouldn't use suspend on such a system ;-) I tried the example from man crypttab: cr_md0 /dev/md0 /dev/random swap Result: Swap not active - probably because /dev/random can only provide some bytes at boot time. Testing with "boot.crypto start /dev/md0", it was hanging (probably again waiting for more random data) until I Ctrl-C'd it. I then tested with cr_md0 /dev/md0 /dev/urandom swap This seems to work (tested with "boot.crypto start /dev/md0"), but the manpage contradicts itsself: · The third column key file specifies the file to use for decrypting the encrypted data of the source device. It can also be a device name (e.g. /dev/urandom, which is useful for encrypted swap devices). Warning: luks does not support infinite streams (like /dev/urandom), it requires a fixed size key. So the first paragraph says "you can use /dev/urandom", and the second says "do NOT use /dev/urandom". Which part is correct? ;-) (and: please fix the manpage or ask for a bugreport) Regards, Christian Boltz -- Zeitreisen vermeide ich immer, sollen irgendwie ungesund sein. [Helga Fischer in suse-linux] --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

2 1

Re: [opensuse-security] LUKS encrypted swap
by Wilson Mattos 12 Dec '07

12 Dec '07

My /etc/crypttab on a working openSUSE 10.3 box looks like this for the swap partition: cr_sda1 /dev/sda2 /dev/random swap The way to do it is to go through YaST->System->Partitioner and chose to format the partition and "Encrypt" partition. When prompted for a passphrase just leave both fields blank. Works like a champ! Wil ------------ Wilson Mattos Technology Specialist wmattos(a)novell.com 949-212-2805 Novell, Inc. Your Linux is Ready! www.novell.com/linux >>> Christian Boltz <suse-security(a)cboltz.de> 12/11/2007 4:15 PM >>> Hello, I wonder how I should implement LUKS encrypted swap with random encryption at every boot. (Yes, I know that I shouldn't use suspend on such a system ;-) I tried the example from man crypttab: cr_md0 /dev/md0 /dev/random swap Result: Swap not active - probably because /dev/random can only provide some bytes at boot time. Testing with "boot.crypto start /dev/md0", it was hanging (probably again waiting for more random data) until I Ctrl-C'd it. I then tested with cr_md0 /dev/md0 /dev/urandom swap This seems to work (tested with "boot.crypto start /dev/md0"), but the manpage contradicts itsself: · The third column key file specifies the file to use for decrypting the encrypted data of the source device. It can also be a device name (e.g. /dev/urandom, which is useful for encrypted swap devices). Warning: luks does not support infinite streams (like /dev/urandom), it requires a fixed size key. So the first paragraph says "you can use /dev/urandom", and the second says "do NOT use /dev/urandom". Which part is correct? ;-) (and: please fix the manpage or ask for a bugreport) Regards, Christian Boltz -- Zeitreisen vermeide ich immer, sollen irgendwie ungesund sein. [Helga Fischer in suse-linux] --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

1 0

[opensuse-security] SUSE Security Announcement: samba (SUSE-SA:2007:065)
by Thomas Biege 06 Dec '07

06 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: samba Announcement ID: SUSE-SA:2007:065 Date: Wed, 05 Dec 2007 16:00:00 +0000 Affected Products: SUSE LINUX 10.0 SUSE LINUX 10.1 openSUSE 10.2 openSUSE 10.3 UnitedLinux 1.0 SuSE Linux Enterprise Server 8 SuSE Linux Openexchange Server 4 SuSE Linux Desktop 1.0 SuSE Linux Standard Server 8 SuSE Linux School Server SUSE LINUX Retail Solution 8 SUSE SLES 9 Novell Linux Desktop 9 Open Enterprise Server Novell Linux POS 9 SUSE Linux Enterprise Desktop 10 SP1 SLE SDK 10 SP1 SUSE Linux Enterprise Server 10 SP1 Vulnerability Type: remote code execution Severity (1-10): 7 SUSE Default Package: no Cross-References: CVE-2007-5398 CVE-2007-4572 Content of This Advisory: 1) Security Vulnerability Resolved: fixed two buffer overflows Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: none 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion The samba-suite is an open-source implementation of the SMB protocol. CVE-2007-5398: Secunia Research has reported a bug in function reply_netbios_packet() that allowed remote attackers to execute arbitrary code by sending specially crafted WINS "Name Registration" requests followed by a WINS "Name Query" request packet. The exploitable code in samba can only be reached if the option "wins support" was enabled. CVE-2007-4572: Another bug reported by Secunia Research affected the processing of GETDC mailslot request in nmbd. This error can also be exploited remotely to execute arbitrary code, but only if samba was configured as Primary or Backup Domain Controller. 2) Solution or Work-Around Please install the provided samba update packages. 3) Special Instructions and Notes Please restart the samba daemons. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv <file.rpm> to apply the update, replacing <file.rpm> with the filename of the downloaded RPM package. x86 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/cifs-mount-3… 14fe2bb97903a1184420edb1c8cd91ab http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/ldapsmb-1.34… 5076f9efd5b4b375abc56a0c805fb975 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libmsrpc-3.0… 270f3d20ac547a4f02eb7e1cbb2ee8b1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libmsrpc-dev… 729cadd5041edc7f03f21c784c6b85bb http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbclient… a2566202716e9d8cd7bcd6928ded4ce0 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbclient… bc36927bb01e46e9b2deb1b2d1fcf745 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbsharem… 59a261a3b0c25bf08f2700436a70f3e3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/libsmbsharem… 548acc17d4a80b83ac55c3b627955bf8 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-3.0.26… 94b668592e808f28293ea1ea3a62d3f0 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-client… 30fe5f450ce9516bcbc5852ceea60f02 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-devel-… 077b7741322895a40740954043db6929 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-krb-pr… 1afd7fa4037a05a692e819c6f2c07363 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-python… 8d381a7574f565321f0643f2c282ea5e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-vscan-… f402850bba03c85e96b740b2f0ac1454 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/samba-winbin… 7644257c79de02f67eb7bfe54ac57f33 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/cifs-mount-3.0.23d-19.10.i… 8ccde4dd789f893ba1362da7e819a840 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/ldapsmb-1.34b-27.8.i586.rpm 966284924eddb1d99ee5fe8a469fe915 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libmsrpc-3.0.23d-19.10.i58… 139822c22fea9ae1f0141f799bf091ea ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libmsrpc-devel-3.0.23d-19.… fe77521e9ee88bf2604eff585d061d05 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libsmbclient-3.0.23d-19.10… 33a11dc959526883613d9923bc4e13fc ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/libsmbclient-devel-3.0.23d… 1f865efafe1fab44172340195e66c3af ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-3.0.23d-19.10.i586.r… 6b1bbca71a0643ccec19929cb52031bb ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-client-3.0.23d-19.10… 89e9f6e9c0993470e70f411ea3801f4f ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-krb-printing-3.0.23d… d99011b9f749140cf80b1fabfb6a54a0 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-pdb-3.0.23d-19.10.i5… ca93991e649e1e2272715779f9716f52 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-python-3.0.23d-19.10… 671bf08a3f7b62e93da1ced4bef31742 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-vscan-0.3.6b-98.8.i5… a0966a86569a13402dd4438b62a0bf10 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/samba-winbind-3.0.23d-19.1… 17a7134d8cef65a361566ea4304fefe4 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/cifs-mount-3.0.22-13.36.i5… f13dd16a6abe3d5c960f75982fe1eedf ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/ldapsmb-1.34a-18.32.i586.r… 3ab30876f7cf45ae3bef0fd83a3bfd2d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libmsrpc-3.0.22-13.36.i586… bc467864f082a15ac315fb1254b6df3a ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libmsrpc-devel-3.0.22-13.3… 2feb2176c4c56259cb69697a59294fda ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libsmbclient-3.0.22-13.36.… 0336590ca50764840b63926ef586ff80 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/libsmbclient-devel-3.0.22-… 038564f0986003f5759335e856d76f0b ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-3.0.22-13.36.i586.rpm 8b3b1cf5ffe433d03effc8b93cf4adb1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-client-3.0.22-13.36.… 7973ecd4259e5711e517a11706de59c5 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-pdb-3.0.22-13.36.i58… 38e3f5e6d9fe21e28e7f3b7e231bc973 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-python-3.0.22-13.36.… 124e5ad410dbe369332f776fa9899b18 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-vscan-0.3.6b-42.63.i… 0fdb009bb860cd97403630323e110f14 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/samba-winbind-3.0.22-13.36… d2c9133fa8be2dfc1f79c0476c64be12 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/cifs-mount-3.0.20b-3.… 2921e713f4da35351148c4b937728981 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/ldapsmb-1.33-6.17.i58… a15703aeb6c91c5a386c352bb6a52496 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/libsmbclient-3.0.20b-… 5fedfe5cfa80a9cb9eb50114a6668d7d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/libsmbclient-devel-3.… 9b39b90a4b854480dc65ac09d50b8f5a ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-3.0.20b-3.17.i5… e6d2644adea97106855950eaf6a3aa51 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-client-3.0.20b-… 2fda9ea9ef15e217ab7274fa70459d92 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-doc-3.0.20b-3.1… c4f5426c218a994630a76f0d32cd9e3e ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-pdb-3.0.20b-3.1… 04d1b78cf732a8e38daadb5f521c0fbc ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-python-3.0.20b-… 343b2aaa31d327a4355524cc59cf2c12 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-vscan-0.3.6b-4.… 9d9cbe74afe66c2d94da56f51078c674 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/samba-winbind-3.0.20b… f119e26c0aa57edc31bed023973df92e Platform Independent: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/noarch/samba-doc-… 6846ff9d376e6a33fd0ee0cff6dd86a1 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/noarch/samba-doc-3.0.23d-19.7.n… 2dfce780a4211c537ae21a92d307a3b5 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/samba-doc-3.0.22-20.50.n… 9c13398cd8be995cb7823bc749e419f7 Power PC Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/cifs-mount-3.… cd4db7e449aa2e16faa79ea555569535 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/ldapsmb-1.34b… 681fde00928cce85a082b92136417e7e http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libmsrpc-3.0.… ee20f10891611560bee4a4efc4dce597 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libmsrpc-deve… f396f340c24effdc9c769a05dab6ea1a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbclient-… 737df32d26bb1e19633b4b15e235e402 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbclient-… dd81a1c74872d03b8774e7728c9fe7ad http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbsharemo… e8811a907ad371207209a34c843de11c http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/libsmbsharemo… 4d702a5cde9822ad5aca32fa408f70c1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-3.0.26a… c17d1ce838b1a5edc27151967c9c172d http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-client-… 91938d2a1a08a4e5baabf8b11eafc204 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-devel-3… a1e9015a9b11099af46988ac6d36f7bc http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-krb-pri… 281d6999da5cf849bb2f0d4a000ef526 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-python-… 5b18a5c5f8acf53d3e0704975b3f1daf http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-vscan-0… 0ad0bd954f75ad44b018e427c1d03a16 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/samba-winbind… fb83f45f7744ab4e8ef11d6c3e09a419 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/cifs-mount-3.0.23d-19.10.pp… 04f63548d575cd8d7982962069d14915 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/ldapsmb-1.34b-27.8.ppc.rpm 5a44e13be59b31c3b7aaebeea1746c34 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libmsrpc-3.0.23d-19.10.ppc.… f5200b9cb55bc6767ea8ba44fec0a7ee ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libmsrpc-devel-3.0.23d-19.1… fa0fa3bc47fa629d888684fa227ff71a ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libsmbclient-3.0.23d-19.10.… c74f98dd6a181f3c7fe5c8bc2f7dec79 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/libsmbclient-devel-3.0.23d-… fc45c4a50432cde21c08440c4b45b22a ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-3.0.23d-19.10.ppc.rpm 20fc3dfeaabb2b52d76e8d993ded89db ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-client-3.0.23d-19.10.… 8257c799f755c1e5a4384c9e9c20d235 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-krb-printing-3.0.23d-… b799e145e3aedbeb5a6e75775861cbe4 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-pdb-3.0.23d-19.10.ppc… 1ea46758cf6ecb184fa8b1907dfdca74 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-python-3.0.23d-19.10.… 3bd22f16534a31e9104a3c088d8aee80 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-vscan-0.3.6b-98.8.ppc… 1f78074b3a7b77f432388c05ddc3d14e ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/samba-winbind-3.0.23d-19.10… c17e608b1b9482d27edb234043e17d3d SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/cifs-mount-3.0.22-13.36.ppc… 7bc15580657e490d7fc463b409153c41 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/ldapsmb-1.34a-18.32.ppc.rpm 0aac5cf5cf83b1f75faa0de6a42f3d9c ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libmsrpc-3.0.22-13.36.ppc.r… 49c54ca562b28e2e004bdf9f63f4200a ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libmsrpc-devel-3.0.22-13.36… 8501c3db58735d980adcdcc20f04c254 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libsmbclient-3.0.22-13.36.p… a9be46f3a9255fc4064bba1cd56fc2c1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/libsmbclient-devel-3.0.22-1… 815654df8fcfc6d6c36b489d977dcb43 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-3.0.22-13.36.ppc.rpm abbb54105d90fb535d30cbc186e5660d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-client-3.0.22-13.36.p… 1f53014fcd14b7f16aa3cabb27d36dce ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-pdb-3.0.22-13.36.ppc.… 0074d970fec25817a99ccc8d7c80a124 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-python-3.0.22-13.36.p… 29eb937b609e6f5e421f3cc90cc2bc19 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-vscan-0.3.6b-42.63.pp… fa80b835a0a26032df5752de81cc0299 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/samba-winbind-3.0.22-13.36.… fb6850e265d104b11f491eb57d061cd1 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/cifs-mount-3.0.20b-3.1… d8d7f212df361caa4865cee733fc9dec ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/ldapsmb-1.33-6.17.ppc.… caf36453cd29a27ff1402d2a0b8e2273 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/libsmbclient-3.0.20b-3… e7fb337f1360d8fc8afc6d552e734062 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/libsmbclient-devel-3.0… 8eb2585161daff25ade8584897a4a9dc ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-3.0.20b-3.17.ppc… e056c2e9516d6835783734a854f33f5b ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-client-3.0.20b-3… a3e7d280318dc4284813bcc61f619d30 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-doc-3.0.20b-3.17… f2d60bda261a466558af3bc2aa9ac96e ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-pdb-3.0.20b-3.17… 1ccc2adbbbf0adab5972f132f384a243 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-python-3.0.20b-3… 239c68b7f241056dd69470e2cedcd44d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-vscan-0.3.6b-4.1… 9074a6835b98944586b3108a4e277e3b ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/samba-winbind-3.0.20b-… 0edd15eccfa3382011945c379e951285 x86-64 Platform: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/cifs-mount… 0250de54adf2e2e49e9808052bf3fde1 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/ldapsmb-1.… 34cdf9014e403e9f27dd5ed703d1fef4 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libmsrpc-3… a8fae2da33edad69e10328ac63484f0a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libmsrpc-d… 781c82df3171f48f85c3b3d0cc682dee http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbclie… aec9cdee7c7092547576ab63efa54bba http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbclie… 6638bb3dc260636d8e7feedd215d5ae8 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbclie… 5bd7d582930c1ef779c0963358f1a2c3 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbshar… ce2142b13a69d61ffdf73edac3f27211 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/libsmbshar… 59938a005792947cb71489d0670e9c69 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-3.0.… fa1e1004d27fb371955e6418d2552a05 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-32bi… cb6fdbf7f83c7eab24b8d40cd5c19d31 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-clie… 13feb6dc1cc9fbedbc08cd874234c8a0 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-clie… 8da1a6ba404580186c19cc5ab8f7319a http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-deve… 49bb1f30af2224b30e5b0e427d046ed5 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-krb-… 10f587e53369ea87b972fbd24df00015 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-pyth… f9072b255947e482455544e64cb6eeda http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-vsca… 798c6004e42cc5deb79ac3fc159e68fd http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-winb… 818b94de1ea8c8cc7bb1bef7225dff10 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/samba-winb… fcdde97dd2332dbbcac5bfe437ddf605 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/cifs-mount-3.0.23d-19.10… 75c9dd1cbd9a4aaae9fa0b5e066ebc6c ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/ldapsmb-1.34b-27.8.x86_6… 33225047fd763d6d6a21185e2cdb9787 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libmsrpc-3.0.23d-19.10.x… 3456307ba1bf5960fc31cfb5e78ec73b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libmsrpc-devel-3.0.23d-1… e09bbc56323bc22a094ee4449be363ef ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libsmbclient-3.0.23d-19.… f845b7165577251649e14bc7ca760518 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libsmbclient-32bit-3.0.2… 895e9e3837ea5da9ef4c74eb155d50e5 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/libsmbclient-devel-3.0.2… ead13aa6956de22826a391b575f7e5ad ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-3.0.23d-19.10.x86_… 6bb77019fc3ca84b3004d69a4210c219 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-32bit-3.0.23d-19.1… d41110c83caf90883d68253a03f56cb9 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-client-3.0.23d-19.… a27ca2d2a37691403d77e98fabdf6eae ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-client-32bit-3.0.2… 27b16c5a86d629126c092fa16f2b4dbc ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-krb-printing-3.0.2… ce42563a00b1bcc96e8081c94d907125 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-pdb-3.0.23d-19.10.… bc63ec7af7550f0a32e40eab5da3bafc ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-python-3.0.23d-19.… 8f54b8d4ba6471b972103add0f2cfa20 ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-vscan-0.3.6b-98.8.… 176c2eab8b43e7bf11657a79a3731c9b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-winbind-3.0.23d-19… 5877c0603f92d5e20444efec794f353b ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/samba-winbind-32bit-3.0.… 96430ab5cf73ca69b197a6472302e85a SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/cifs-mount-3.0.22-13.36.… 61f05d68428c52f0d57716d6d62709e8 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/ldapsmb-1.34a-18.32.x86_… 0803b872488e152fae33f5bf1275b9b1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libmsrpc-3.0.22-13.36.x8… cd10ab26a88cda6662c0d1713f4a4e3d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libmsrpc-devel-3.0.22-13… 13495741022e073b3c472bfe1a9c7c6d ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libsmbclient-3.0.22-13.3… dd085255e5fd7be2c828986a9f13cf19 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libsmbclient-32bit-3.0.2… 3c62d4438255d17614141779738e5658 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/libsmbclient-devel-3.0.2… 86ec9fd15372f8a7ee22032fab26ebcb ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-3.0.22-13.36.x86_6… 4922fb3414d40b886277b2d0d49dc3a6 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-32bit-3.0.22-13.36… 173c364b3d412e93091e232b61bd9357 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-client-3.0.22-13.3… 3a46b6ca7b50724f8a6ee7a459942737 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-client-32bit-3.0.2… 4d48fda160f9273b429fc330b1fa660c ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-pdb-3.0.22-13.36.x… 3a0ff7f2ca260c75d48dcb64bf5b9738 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-python-3.0.22-13.3… e3a150973083a86aab1aa69892c48d61 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-vscan-0.3.6b-42.63… aff6c7c9065e95f8759e2f37dfb29bd1 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-winbind-3.0.22-13.… 0d25dddefc48bf4884ffa8a6f71adbce ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/samba-winbind-32bit-3.0.… 7a9b0a8e151a345abe93d7e159dfc3c7 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/cifs-mount-3.0.20b-… 235c616cc45e73bf7ba8ae355586a9e0 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/ldapsmb-1.33-6.17.x… 6ff2cc6b8e9fab4a2ae4e3f8b71f6355 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/libsmbclient-3.0.20… 8a93258c7cd76c74dc52108a33debb42 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/libsmbclient-32bit-… 5d1cec6db7ab0117fffe7298a3b93674 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/libsmbclient-devel-… cd77633f2483244045b04ff537d86b1e ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-3.0.20b-3.17.… ee57327f97331acca368b29dbf373539 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-client-3.0.20… 9606a2ff36bedebbb58f3ca5d4942c6d ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-doc-3.0.20b-3… 9933661bee10627949a0f4265de66460 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-pdb-3.0.20b-3… 04badcfe4a39ab6d7ef8e8f732483a9f ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-python-3.0.20… 5fb14175c631ab41136d54bb8ef5ac2c ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-vscan-0.3.6b-… c91cc42dd45e8c0830f734fff805e099 ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/samba-winbind-3.0.2… 88ae6b69f90a6c36124f197ad67a6e6e Sources: openSUSE 10.3: http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/samba-3.0.26a… 377b122f8a797b73fa289a6863e0f6c9 http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/samba-doc-3.0… 9459f613ca8a1feeb1bb76cdc843c8f5 openSUSE 10.2: ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/samba-3.0.23d-19.10.src.rpm 02d13237b7a9fd3bf3bd3fd6d8b25fac ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/samba-doc-3.0.23d-19.7.nosr… 617364e094a2044cc011d44221dad060 SUSE LINUX 10.1: ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/samba-3.0.22-13.36.src.rpm e809cb2ec420d242aaab06df79ed1a28 ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/samba-doc-3.0.22-20.50.nosr… 89ae8b67d0e65efdb451ab408a5c36c2 SUSE LINUX 10.0: ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/samba-3.0.20b-3.17.src… a159ce0e9ac9e5700ffd08f5e9287a67 Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web: Open Enterprise Server http://support.novell.com/techcenter/psdb/a8a615405c62005f443b3e34d922d381.… Novell Linux POS 9 http://support.novell.com/techcenter/psdb/a8a615405c62005f443b3e34d922d381.… Novell Linux Desktop 9 http://support.novell.com/techcenter/psdb/a8a615405c62005f443b3e34d922d381.… SUSE SLES 9 http://support.novell.com/techcenter/psdb/a8a615405c62005f443b3e34d922d381.… UnitedLinux 1.0 http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SuSE Linux Openexchange Server 4 http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SuSE Linux Enterprise Server 8 http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SuSE Linux Standard Server 8 http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SuSE Linux School Server http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SUSE LINUX Retail Solution 8 http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SuSE Linux Desktop 1.0 http://support.novell.com/techcenter/psdb/4aacd60f39d38eea0965ae4a284e6214.… SUSE Linux Enterprise Server 10 SP1 http://support.novell.com/techcenter/psdb/fbb935b5e53729bf34003933950a015a.… SLE SDK 10 SP1 http://support.novell.com/techcenter/psdb/fbb935b5e53729bf34003933950a015a.… SUSE Linux Enterprise Desktop 10 SP1 http://support.novell.com/techcenter/psdb/fbb935b5e53729bf34003933950a015a.… ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: Please consult the weekly summary report. ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify <file> replacing <file> with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made <DATE> using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team <security(a)suse.de>" where <DATE> is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or RPM package: 1) Using the internal gpg signatures of the rpm package 2) MD5 checksums as provided in this announcement 1) The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig <file.rpm> to verify the signature of the package, replacing <file.rpm> with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from build(a)suse.de with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and at the end of this announcement. 2) If you need an alternative means of verification, use the md5sum command to verify the authenticity of the packages. Execute the command md5sum <filename.rpm> after you downloaded the file from a SUSE FTP server or its mirrors. Then compare the resulting md5sum with the one that is listed in the SUSE security announcement. Because the announcement containing the checksums is cryptographically signed (by security(a)suse.de) the checksums show proof of the authenticity of the package if the signature of the announcement is valid. Note that the md5 sums published in the SUSE Security Announcements are valid for the respective packages only. Newer versions of these packages cannot be verified. - SUSE runs two security mailing lists to which any interested party may subscribe: opensuse-security(a)opensuse.org - General Linux and SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security+subscribe(a)opensuse.org>. opensuse-security-announce(a)opensuse.org - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to <opensuse-security-announce+subscribe(a)opensuse.org>. ===================================================================== SUSE's security contact is <security(a)suse.com> or <security(a)suse.de>. The <security(a)suse.de> public key is listed below. ===================================================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. In particular, the clear text signature should show proof of the authenticity of the text. SUSE Linux Products GmbH provides no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048R/3D25D3D9 1999-03-06 SuSE Security Team <security(a)suse.de> pub 1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2 (GNU/Linux) mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12CohGBBARAgAGBQI7HmHDAAoJEJ5A4xAACqukTlQAoI4QzP9yjPohY7OU F7J3eKBTzp25AJ42BmtSd3pvm5ldmognWF3Trhp+GYkAlQMFEDe3O8IWkDf+zvyS FQEBAfkD/3GG5UgJj18UhYmh1gfjIlDcPAeqMwSytEHDENmHC+vlZQ/p0mT9tPiW tp34io54mwr+bLPN8l6B5GJNkbGvH6M+mO7R8Lj4nHL6pyAv3PQr83WyLHcaX7It Klj371/4yzKV6qpz43SGRK4MacLo2rNZ/dNej7lwPCtzCcFYwqkiiEYEEBECAAYF AjoaQqQACgkQx1KqMrDf94ArewCfWnTUDG5gNYkmHG4bYL8fQcizyA4An2eVo/n+ 3J2KRWSOhpAMsnMxtPbBmQGiBDnu9IERBACT8Y35+2vv4MGVKiLEMOl9GdST6MCk YS3yEKeueNWc+z/0Kvff4JctBsgs47tjmiI9sl0eHjm3gTR8rItXMN6sJEUHWzDP +Y0PFPboMvKx0FXl/A0dM+HFrruCgBlWt6FA+okRySQiliuI5phwqkXefl9AhkwR 8xocQSVCFxcwvwCglVcOQliHu8jwRQHxlRE0tkwQQI0D+wfQwKdvhDplxHJ5nf7U 8c/yE/vdvpN6lF0tmFrKXBUX+K7u4ifrZlQvj/81M4INjtXreqDiJtr99Rs6xa0S cZqITuZC4CWxJa9GynBED3+D2t1V/f8l0smsuYoFOF7Ib49IkTdbtwAThlZp8bEh ELBeGaPdNCcmfZ66rKUdG5sRA/9ovnc1krSQF2+sqB9/o7w5/q2qiyzwOSTnkjtB UVKn4zLUOf6aeBAoV6NMCC3Kj9aZHfA+ND0ehPaVGJgjaVNFhPi4x0e7BULdvgOo AqajLfvkURHAeSsxXIoEmyW/xC1sBbDkDUIBSx5oej73XCZgnj/inphRqGpsb+1n KFvF+rQoU3VTRSBQYWNrYWdlIFNpZ25pbmcgS2V5IDxidWlsZEBzdXNlLmRlPohi BBMRAgAiBQJA2AY+AhsDBQkObd+9BAsHAwIDFQIDAxYCAQIeAQIXgAAKCRCoTtro nIAKypCfAJ9RuZ6ZSV7QW4pTgTIxQ+ABPp0sIwCffG9bCNnrETPlgOn+dGEkAWeg KL+IRgQQEQIABgUCOnBeUgAKCRCeQOMQAAqrpNzOAKCL512FZvv4VZx94TpbA9lx yoAejACeOO1HIbActAevk5MUBhNeLZa/qM2JARUDBRA6cGBvd7LmAD0l09kBATWn B/9An5vfiUUE1VQnt+T/EYklES3tXXaJJp9pHMa4fzFa8jPVtv5UBHGee3XoUNDV wM2OgSEISZxbzdXGnqIlcT08TzBUD9i579uifklLsnr35SJDZ6ram51/CWOnnaVh UzneOA9gTPSr+/fT3WeVnwJiQCQ30kNLWVXWATMnsnT486eAOlT6UNBPYQLpUprF 5Yryk23pQUPAgJENDEqeU6iIO9Ot1ZPtB0lniw+/xCi13D360o1tZDYOp0hHHJN3 D3EN8C1yPqZd5CvvznYvB6bWBIpWcRgdn2DUVMmpU661jwqGlRz1F84JG/xe4jGu zgpJt9IXSzyohEJB6XG5+D0BuQINBDnu9JIQCACEkdBN6Mxf5WvqDWkcMRy6wnrd 9DYJ8UUTmIT2iQf07tRUKJJ9v0JXfx2Z4d08IQSMNRaq4VgSe+PdYgIy0fbj23Vi a5/gO7fJEpD2hd2f+pMnOWvH2rOOIbeYfuhzAc6BQjAKtmgR0ERUTafTM9Wb6F13 CNZZNZfDqnFDP6L12w3z3F7FFXkz07Rs3AIto1ZfYZd4sCSpMr/0S5nLrHbIvGLp 271hhQBeRmmoGEKO2JRelGgUJ2CUzOdtwDIKT0LbCpvaP8PVnYF5IFoYJIWRHqlE t5ucTXstZy7vYjL6vTP4l5xs+LIOkNmPhqmfsgLzVo0UaLt80hOwc4NvDCOLAAMG B/9g+9V3ORzw4LvO1pwRYJqfDKUq/EJ0rNMMD4N8RLpZRhKHKJUm9nNHLbksnlZw rbSTM5LpC/U6sheLP+l0bLVoq0lmsCcUSyh+mY6PxWirLIWCn/IAZAGnXb6Zd6Tt IJlGG6pqUN8QxGJYQnonl0uTJKHJENbI9sWHQdcTtBMc34gorHFCo1Bcvpnc1LFL rWn7mfoGx6INQjf3HGQpMXAWuSBQhzkazY6vaWFpa8bBJ+gKbBuySWzNm3rFtT5H RKMWpO+M9bHp4d+puY0L1YwN1OMatcMMpcWnZpiWiR83oi32+xtWUY2U7Ae38mMa g8zFbpeqPQUsDv9V7CAJ1dbriEwEGBECAAwFAkDYBnoFCQ5t3+gACgkQqE7a6JyA CspnpgCfRbYwxT3iq+9l/PgNTUNTZOlof2oAn25y0eGi0371jap9kOV6uq71sUuO =ypVs - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iQEVAwUBR1a2r3ey5gA9JdPZAQI5sAgAhOGYRIfJNevhvw3rCXfldbG5lsU9dlV/ 7BN6rEPWicYKKL21wUPrls6x0Vl4kvexguszbZA9AGmNecN5cY/6ZLFTEwg9R51z ZTGWyaxvPSxFbd1kz/sk6e/icgwGYZS+uRkK+Iqb3tTzCz2lOiHrGUNLDuNWUdjr oQ+oZmaPXgPZEPGwB5qxy7lr3fqT2MyI1CcEighmO6aVoPKW5sQzR03NebaEXKHH Tk1IXOYSW2tlxeak1nfoNwb3Q3L/qOz7Fdq7GDay4Ptyo2JQ3Z+dL6kf8Jfy02jP Lh6u6EuZvvO4lWYa2cWonHlXEzgdSA+MIpyKgUZBDBygcQQZWPjRJQ== =cY7F -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

3 3

[opensuse-security] Re: [security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:2007:064)
by Frank Steiner 05 Dec '07

05 Dec '07

Hi, Marcus Meissner wrote > ______________________________________________________________________________ > > SUSE Security Announcement > > Package: kernel > Announcement ID: SUSE-SA:2007:064 > Date: Tue, 04 Dec 2007 11:00:00 +0000 > Affected Products: SUSE LINUX 10.1 > SUSE Linux Enterprise Desktop 10 SP1 > SUSE Linux Enterprise 10 SP1 DEBUGINFO > SLE SDK 10 SP1 > SUSE Linux Enterprise Server 10 SP1 > 4 hours after I booted our NFS server and our clients with the new kernel, lockd and/or nfsd crashed on the NFS server and I had to reboot. I know it's tainted so I won't get official support, so we will run a test with the original SuSE kernel. Anyway, it's only tainted with the fglrx and the nvidia 3D modules and we've been adding those to every kernel since SuSE 10.1 and SLES10 were release, so I doubt that it's their fault. Since October 4th we were running the 2.6.16.53-0.16 kernel code (with fglrs and nvidia) without any problems, so it must be a patch from 2.6.16.53 to 2.6.16.54. It looks like sth. has changed in the lockd or nfsd code. Is anyone else sth. similar? since cu, Frank Oops: 0002 [1] SMP last sysfs file: /class/scsi_host/host4/proc_name CPU 0 Modules linked in: nfsd exportfs af_packet cpufreq_ondemand cpufreq_userspace cpufreq_powersave powernow_k8 freq_table eeprom adm1026 hwmon_vid hwmon i2c_isa edd mptctl button battery ac sr_mod cdrom dm_mod usbhid usb_storage shpchp i2c_nforce2 forcedeth ohci_hcd ehci_hcd usbcore i2c_core pci_hotplug fan thermal processor qla2xxx firmware_class scsi_transport_fc amd74xx sg mptsas scsi_transport_sas mptscsih mptbase ide_disk ide_core Pid: 6403, comm: lockd Tainted: G U 2.6.16-10suse-bio-smp #1 RIP: 0010:[<ffffffff8019414e>] <ffffffff8019414e>{__locks_delete_block+43} RSP: 0018:ffff810116fdbe00 EFLAGS: 00010286 RAX: ffff81013cfab508 RBX: ffff81013cfab500 RCX: ffffffff80421780 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff81013cfab500 RBP: ffff81011bfe1810 R08: ffff810116fbb054 R09: 0000000000000005 R10: 0000000000000000 R11: ffff81011a893800 R12: ffff810149d5f860 R13: 0000000000000001 R14: ffff8101168a54f0 R15: 0000000000000000 FS: 00002b65f94dc6d0(0000) GS:ffffffff804a9000(0000) knlGS:00000000eb99fba0 CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b CR2: 0000000000000000 CR3: 000000021b5e0000 CR4: 00000000000006e0 Process lockd (pid: 6403, threadinfo ffff810116fda000, task ffff81011b088100) Stack: ffffffff801947c4 ffff810149d5f860 ffff81011bfe1810 ffff8101199a08d0 ffffffff8019492b ffff81011bfe1810 ffffffff80194d46 ffff81011bfe1310 ffff8101199a0828 ffff8100d24093c0 Call Trace: <ffffffff801947c4>{locks_wake_up_blocks+27} <ffffffff8019492b>{locks_delete_lock+126} <ffffffff80194d46>{__posix_lock_file+398} <ffffffff80233f4f>{nlmsvc_unlock+125} <ffffffff802382c5>{nlm4svc_proc_unlock+111} <ffffffff8037298c>{svc_process+838} <ffffffff8023365a>{lockd+0} <ffffffff802337f9>{lockd+415} <ffffffff8010bb8a>{child_rip+8} <ffffffff8023365a>{lockd+0} <ffffffff8023365a>{lockd+0} <ffffffff8010bb82>{child_rip+0} Code: 48 89 0a 48 89 40 08 48 89 47 08 48 c7 07 00 00 00 00 c3 48 RIP <ffffffff8019414e>{__locks_delete_block+43} RSP <ffff810116fdbe00> CR2: 0000000000000000 <0>Bad page state in process 'nfsd' page:ffff81021ce5c6a8 flags:0x0600000000000000 mapping:0000000000000000 mapcount:-32510 count:469637161 Trying to fix it up, but a reboot is needed Backtrace: Call Trace: <ffffffff80161fd5>{bad_page+80} <ffffffff80163035>{get_page_from_freelist+740} <ffffffff80163181>{__alloc_pages+101} <ffffffff80375042>{svc_recv+250} <ffffffff8012aed7>{default_wake_function+0} <ffffffff80382504>{__down_read+18} <ffffffff8824b47e>{:nfsd:nfsd+0} <ffffffff8824b586>{:nfsd:nfsd+264} <ffffffff8010bb8a>{child_rip+8} <ffffffff8824b47e>{:nfsd:nfsd+0} <ffffffff8824b47e>{:nfsd:nfsd+0} <ffffffff8010bb82>{child_rip+0} nfsd: last server has exited nfsd: unexporting all filesystems -- Dipl.-Inform. Frank Steiner Web: http://www.bio.ifi.lmu.de/~steiner/ Lehrstuhl f. Bioinformatik Mail: http://www.bio.ifi.lmu.de/~steiner/m/ LMU, Amalienstr. 17 Phone: +49 89 2180-4049 80333 Muenchen, Germany Fax: +49 89 2180-99-4049 * Rekursion kann man erst verstehen, wenn man Rekursion verstanden hat. * --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

2 3

[opensuse-security] Treason uncloaked
by Magnus Rosenbaum 04 Dec '07

04 Dec '07

Hello everybody, yesterday one of my webservers refused to deliver any more webpages, while reaching the server with ssh was fine and the load of the server was very low. But there were 100 apache processes, which is the configured limit on that server. Usually there are about 30 apache processes. In /var/log/messages I found some messages like this at the same time: Nov 19 14:38:12 server1 kernel: TCP: Treason uncloaked! Peer 87.160.97.54:2560/80 shrinks window 1710186274:17 10191335. Repaired. Does anyone know what this means and how it might be related to the apache processes? Ist this some kind of DoS attack? cu, Magnus -- Carl Magnus Rosenbaum M.A. Administration - Programmierung - Weiterbildung http://cmr.cx/ Tel: +49 89 70066626 Fax: +49 89 70066686 Mobil: +49 163 7006662 PGP Fingerprint: DEBC 3C99 EF1D 74F0 D4C7 EFF5 C268 3690 0EA1 7641

6 8

[opensuse-security] The last security update makes samba dump core dozens of times per sencond.
by Carlos E. R. 02 Dec '07

02 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bugzilla 345437 After today's security update, samba dumps core when a Siemens Gigaset M740 AV digital TV receiver (internally a linux 2.4 machine) tries to load a share in my opensuse 10.3 machine. This was working till today. These security patches were installed today: dmapi 2.2.8-22 cifs-mount 3.0.26a-3.3 libsmbclient 3.0.26a-3.3 samba-client 3.0.26a-3.3 samba 3.0.26a-3.3 I can't connect, and these messages start to fill the log by the hundred and I have to restart the server (and no, there is no core in that dir): Dec 2 00:33:04 nimrodel smbd[3686]: [2007/12/02 00:33:04, 0] lib/fault.c:dump_core(181) Dec 2 00:33:04 nimrodel smbd[3686]: dumping core in /var/log/samba/cores/smbd Dec 2 00:33:04 nimrodel smbd[3686]: Dec 2 00:33:04 nimrodel smbd[3687]: [2007/12/02 00:33:04, 0] lib/util.c:smb_panic(1632) Dec 2 00:33:04 nimrodel smbd[3687]: PANIC (pid 3687): push_ascii - dest_len == -1 Dec 2 00:33:04 nimrodel smbd[3687]: [2007/12/02 00:33:04, 0] lib/util.c:log_stack_trace(1736) Dec 2 00:33:04 nimrodel smbd[3687]: BACKTRACE: 14 stack frames: Dec 2 00:33:04 nimrodel smbd[3687]: #0 /usr/sbin/smbd(log_stack_trace+0x2d) [0x8024ca7d] Dec 2 00:33:04 nimrodel smbd[3687]: #1 /usr/sbin/smbd(smb_panic+0x5d) [0x8024cbad] Dec 2 00:33:04 nimrodel smbd[3687]: #2 /usr/sbin/smbd [0x802351e4] Dec 2 00:33:04 nimrodel smbd[3687]: #3 /usr/sbin/smbd(push_string_fn+0x44) [0x80235234] Dec 2 00:33:04 nimrodel smbd[3687]: #4 /usr/sbin/smbd(srvstr_push_fn+0xa5) [0x800bfd65] Dec 2 00:33:04 nimrodel smbd[3687]: #5 /usr/sbin/smbd [0x800a5886] Dec 2 00:33:04 nimrodel smbd[3687]: #6 /usr/sbin/smbd [0x800b0424] Dec 2 00:33:04 nimrodel smbd[3687]: #7 /usr/sbin/smbd(handle_trans2+0x168) [0x800b16d8] Dec 2 00:33:04 nimrodel smbd[3687]: #8 /usr/sbin/smbd(reply_trans2+0x69c) [0x800b2a3c] Dec 2 00:33:04 nimrodel smbd[3687]: #9 /usr/sbin/smbd [0x800cfaee] Dec 2 00:33:04 nimrodel smbd[3687]: #10 /usr/sbin/smbd(smbd_process+0x4df) [0x800d085f] Dec 2 00:33:04 nimrodel smbd[3687]: #11 /usr/sbin/smbd(main+0xa18) [0x80323ea8] Dec 2 00:33:04 nimrodel smbd[3687]: #12 /lib/libc.so.6(__libc_start_main+0xe0) [0xb7aa1fe0] Dec 2 00:33:04 nimrodel smbd[3687]: #13 /usr/sbin/smbd [0x800542a1] Dec 2 00:33:04 nimrodel smbd[3687]: [2007/12/02 00:33:04, 0] lib/fault.c:dump_core(181) - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4-svn0 (GNU/Linux) iD8DBQFHUgahtTMYHG2NR9URAoNuAKCY8C6BGmKzODUajTxuzKzRe9zuEgCfcQTc yiNsMl8PZcKjkOsDi/E7qlE= =Kdoe -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

2 2