openSUSE Recommended Update: Recommended update for samba ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:2260-1 Rating: moderate References: #1065551 #1071090 #1088574 #1093864 #1094881 #1099702 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update provides version 4.7.8 of samba and fixes the following issues: - Update tevent to version 0.9.36. - Update talloc to verison 2.1.11. - Use new foreground execution flags for systemd samba daemons. (bsc#1088574, bsc#1071090, bsc#1065551, bsc#1094881) - Add missing package descriptions for several sub-packages. (bsc#1093864) - s3/smbd: Generic fix for incorrect reporting of stream dos attributes on a directory. - ceph/VFS: Add asynchronous fsync to ceph module, fake using synchronous call. - s3/libsmbclient: Fix hard-coded connection error return of ETIMEDOUT. - s3/smbd: Fix SMB2-FLUSH against directories. - s3/smbd/printing: Re-implement delete-on-close semantics for print files missing since 3.5.x. - python: Fix talloc frame use in make_simple_acl(). - winbindd on the AD DC is slow for passdb queries. - No Backtrace given by Samba's AD DC by default. - winbindd doesn't recover loss of netlogon secure channel in case the peer DC is rebooted. - s3/smbd: Fix interaction between chown and SD flags. - s4-heimdal: Fix the format-truncation errors. - vfs_ceph: Add fake async pwrite/pread send/recv hooks. - printing: Return the same error code as Windows does on upload failures. - winbind: Improve child selection. - winbind: Maintain a binding handle per domain and always go via wb_domain_request_send(). - winbindd doesn't recover loss of netlogon secure channel in case the peer DC is rebooted. - Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN. - rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair. - smbclient: Fix broken notify. - libads: Fix the build --without-ads. - winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids. - winbindd: Initialize type = SID_NAME_UNKNOWN in wb_lookupsids_single_done(). - s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call(). - A disconnecting winbind client can cause a problem in the winbind parent child communication. - winbind: Use one queue for all domain children. - Minimize the lifetime of winbindd_cli_state->{pw,gr}ent_state. - winbind should avoid using fstrcpy(domain->dcname,...) on a char *. - The winbind parent should find the dc of a foreign domain via the primary domain. - nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged pipe is not accessable. - Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP NTLM2 packet check failed due to invalid signature!). - s3/VFS: Fix memory leak in vfs_ceph. - rpc_server: Fix NetSessEnum with stale sessions. - dfree cache returning incorrect data for sub directory mounts. - Looking up the user using the UPN results in user name with the REALM instead of the DOMAIN. - s3/passdb: Do not return OK if we don't have pinfo set up. - s3/utils: Do not segfault on error in DoDNSUpdate(). - s4/auth_sam: Allow logons with an empty domain name. - s3/ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we don't own it here. - s3/smbd: Fix possible directory fd leak if the underlying OS doesn't support fdopendir(). - Round-tripping ACL get/set through vfs_fruit will increase the number of ACE entries without limit. - s3/smbd/SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit issues. - s3/smbd: Files or directories can't be opened DELETE_ON_CLOSE without delete access. - s3/smbd: Fix memory leak in vfswrap_getwd(). - s3/smbd: Unix extensions attempts to change wrong field in fchown call. - s3/smbd: Don't use the directory cache for SMB2/3. - build: Fix libceph-common detection. - build: Fix ceph_statx check when configured with libcephfs_dir. - vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async. - ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script. - s3/lib/messages: Don't use the result of sec_init() before calling sec_init(). - smbd can panic if the client-supplied channel sequence number wraps. - dsdb: Fix Uninitialized scalar variable. - s3/libsmb: Allow -U"\\administrator" to work. - Windows 10 cannot logon on Samba NT4 domain. - smbc_opendir should not return EEXIST with invalid login credentials. - s3/smbd: Map nterror on smb2_flush errorpath. - libsmb: Use smb2 tcon if conn_protocol >= SMB2_02. - subnet: Avoid a segfault when renaming subnet objects. - 'wbinfo --name-to-sid' returns misleading result on invalid query. - s3/smbd: Do not crash if we fail to init the session table. - Allow AESNI to be used on all processor supporting AESNI. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-837=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ctdb-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 ctdb-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 ctdb-pcp-pmda-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 ctdb-pcp-pmda-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 ctdb-tests-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 ctdb-tests-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-binding0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-binding0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-samr-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-samr0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-samr0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-krb5pac-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-krb5pac0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-krb5pac0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-nbt-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-nbt0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-nbt0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-standard-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-standard0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-standard0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libnetapi-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libnetapi0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libnetapi0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-credentials-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-credentials0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-credentials0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-errors-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-errors0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-errors0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-hostconfig-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-hostconfig0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-hostconfig0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-passdb-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-passdb0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-passdb0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-policy-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-policy0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-policy0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-util-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-util0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-util0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamdb-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamdb0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamdb0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbclient-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbclient0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbclient0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbconf-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbconf0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbconf0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbldap-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbldap2-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbldap2-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtalloc-devel-2.1.11-lp150.2.3.1 libtalloc2-2.1.11-lp150.2.3.1 libtalloc2-debuginfo-2.1.11-lp150.2.3.1 libtevent-devel-0.9.36-lp150.2.3.1 libtevent-util-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtevent-util0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtevent-util0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtevent0-0.9.36-lp150.2.3.1 libtevent0-debuginfo-0.9.36-lp150.2.3.1 libwbclient-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libwbclient0-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libwbclient0-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 python-talloc-2.1.11-lp150.2.3.1 python-talloc-debuginfo-2.1.11-lp150.2.3.1 python-talloc-devel-2.1.11-lp150.2.3.1 python-tevent-0.9.36-lp150.2.3.1 python-tevent-debuginfo-0.9.36-lp150.2.3.1 python3-talloc-2.1.11-lp150.2.3.1 python3-talloc-debuginfo-2.1.11-lp150.2.3.1 python3-talloc-devel-2.1.11-lp150.2.3.1 python3-tevent-0.9.36-lp150.2.3.1 python3-tevent-debuginfo-0.9.36-lp150.2.3.1 samba-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-client-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-client-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-core-devel-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-debugsource-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-dsdb-modules-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-dsdb-modules-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-kdc-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-kdc-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-libs-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-libs-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-pidl-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-python-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-python-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-test-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-test-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-winbind-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-winbind-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 talloc-debugsource-2.1.11-lp150.2.3.1 talloc-man-2.1.11-lp150.2.3.1 tevent-debugsource-0.9.36-lp150.2.3.1 tevent-man-0.9.36-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libdcerpc-binding0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-binding0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-samr0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc-samr0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libdcerpc0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-krb5pac0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-krb5pac0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-nbt0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-nbt0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-standard0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr-standard0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libndr0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libnetapi0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libnetapi0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-credentials0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-credentials0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-errors0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-errors0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-hostconfig0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-hostconfig0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-passdb0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-passdb0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-policy0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-policy0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-util0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamba-util0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamdb0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsamdb0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbclient0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbclient0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbconf0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbconf0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbldap2-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libsmbldap2-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtalloc2-32bit-2.1.11-lp150.2.3.1 libtalloc2-32bit-debuginfo-2.1.11-lp150.2.3.1 libtevent-util0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtevent-util0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libtevent0-32bit-0.9.36-lp150.2.3.1 libtevent0-32bit-debuginfo-0.9.36-lp150.2.3.1 libwbclient0-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 libwbclient0-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 python-talloc-32bit-2.1.11-lp150.2.3.1 python-talloc-32bit-debuginfo-2.1.11-lp150.2.3.1 python-tevent-32bit-0.9.36-lp150.2.3.1 python-tevent-32bit-debuginfo-0.9.36-lp150.2.3.1 python3-talloc-32bit-2.1.11-lp150.2.3.1 python3-talloc-32bit-debuginfo-2.1.11-lp150.2.3.1 python3-tevent-32bit-0.9.36-lp150.2.3.1 python3-tevent-32bit-debuginfo-0.9.36-lp150.2.3.1 samba-ceph-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-ceph-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-client-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-client-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-kdc-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-kdc-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-libs-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-libs-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-winbind-32bit-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 samba-winbind-32bit-debuginfo-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 - openSUSE Leap 15.0 (noarch): samba-doc-4.7.8+git.62.c1052da2b4e-lp150.3.3.1 References: https://bugzilla.suse.com/1065551 https://bugzilla.suse.com/1071090 https://bugzilla.suse.com/1088574 https://bugzilla.suse.com/1093864 https://bugzilla.suse.com/1094881 https://bugzilla.suse.com/1099702