openSUSE Recommended Update: Recommended update for samba ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:3782-1 Rating: moderate References: #1102230 #1111374 #1111528 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update provides version 4.7.10 of samba and brings the following fixes and improvements: - Support the new v4 Performance Co-Pilot API. (bsc#1111374) - Deadlock with ctdb_mutex_ceph_rados_helper (bsc#1102230) - Quotas don't work with SMB2. - Build failure when quota support not detected. - vfs_fruit can leave lock records when testing for netatalk share mode locks - causing panic. - vfs_time_audit is failing FSCTL_SRV_REQUEST_RESUME_KEY requests. - g_lock conflict detection broken when processing stale entries. - NTLM authentications using default domain/workgroup stopped working. - vfs_ceph lies about flock support. - Using sendfile = yes with SMB2 can cause CPU spin. - Durable Handle reconnect fails in smbd_smb2_create_durable_lease_check(). - cli_splice() fallback code reads wrong amount on termination case. - LDB 1.4.0 breaks Samba < 4.9. - samba-tool trust: support discovery via netr_GetDcName. - samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA. - conn->vuid is invalid after a SMB session reauth. - Durable Handles reconnect fails in a cluster when the cluster fs uses different device ids. - cli_splice() doesn't correctly return written bytes as it's uninitialized in libsmbclient code. - Threading support in talloc_tos() crashes when enabled. - Incorrect talloc_stackframe handling in python ACL test code (make_simple_acl). - Fail renaming file if that file has open streams. - vfs_fruit: Delete 0 byte size streams if AAPL is enabled. - Creating missing remote databases during recovery can fail. - CTDB_BROADCAST_VNNMAP should not be used. - Fix building Samba with gcc 8.1. - Uncaught exception at ldb_modules/password_hash.c:2241 during new domain provision. - "net ads keytab add nfs" writes only one enctype with older kerberos libraries. - VFS modules that implement pread/pwrite must also implement pread_send/pwrite_send. - vfs_ceph is missing async fsync implementations. - net ads keytab list fails with (smb_krb5_kt_open failed (Key table name malformed). - s390 and s390 needs to run with 'use mmap = no' by default. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1415=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ctdb-4.7.10+git.124.8d97fe90926-lp150.3.9.1 ctdb-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 ctdb-pcp-pmda-4.7.10+git.124.8d97fe90926-lp150.3.9.1 ctdb-pcp-pmda-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 ctdb-tests-4.7.10+git.124.8d97fe90926-lp150.3.9.1 ctdb-tests-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libdcerpc-binding0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libdcerpc-binding0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libdcerpc-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libdcerpc-samr-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libdcerpc-samr0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libdcerpc-samr0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libdcerpc0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libdcerpc0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-krb5pac-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-krb5pac0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-krb5pac0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-nbt-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-nbt0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-nbt0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-standard-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-standard0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-standard0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libnetapi-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libnetapi0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libnetapi0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-credentials-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-credentials0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-credentials0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-errors-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-errors0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-errors0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-hostconfig-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-hostconfig0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-hostconfig0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-passdb-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-passdb0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-passdb0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-policy-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-policy0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-policy0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-util-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-util0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-util0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamdb-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamdb0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamdb0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbclient-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbclient0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbclient0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbconf-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbconf0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbconf0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbldap-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbldap2-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbldap2-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libtevent-util-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libtevent-util0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libtevent-util0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libwbclient-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libwbclient0-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libwbclient0-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-client-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-client-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-core-devel-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-debugsource-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-dsdb-modules-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-dsdb-modules-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-kdc-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-kdc-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-libs-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-libs-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-pidl-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-python-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-python-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-test-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-test-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-winbind-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-winbind-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 - openSUSE Leap 15.0 (noarch): samba-doc-4.7.10+git.124.8d97fe90926-lp150.3.9.1 - openSUSE Leap 15.0 (x86_64): libdcerpc-binding0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libdcerpc-binding0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libdcerpc-samr0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libdcerpc-samr0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libdcerpc0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libdcerpc0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-krb5pac0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-krb5pac0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-nbt0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-nbt0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-standard0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr-standard0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libndr0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libnetapi0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libnetapi0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-credentials0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-credentials0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-errors0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-errors0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-hostconfig0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-hostconfig0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-passdb0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-passdb0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-policy0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-policy0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-util0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamba-util0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamdb0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsamdb0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbclient0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbclient0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbconf0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbconf0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbldap2-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libsmbldap2-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libtevent-util0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libtevent-util0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libwbclient0-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 libwbclient0-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-ceph-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-ceph-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-client-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-client-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-kdc-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-kdc-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-libs-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-libs-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-winbind-32bit-4.7.10+git.124.8d97fe90926-lp150.3.9.1 samba-winbind-32bit-debuginfo-4.7.10+git.124.8d97fe90926-lp150.3.9.1 References: https://bugzilla.suse.com/1102230 https://bugzilla.suse.com/1111374 https://bugzilla.suse.com/1111528