Lucene search

HistoryApr 17, 2012 - 3:08 p.m.

Security update for Samba (critical)






The following issues have been fixed in Samba:

  • CVE-2012-1182: PIDL based autogenerated code uses
    client supplied size values which allows attackers to write
    beyond the allocated array size
  • CVE-2012-0870: Ensure AndX offsets are increasing
    strictly monotonically in pre-3.4 versions
  • CVE-2012-0817: Fix memory leak in parent smbd on

Also the following non-security bugs have been fixed:

  • s3-winbindd: Only use SamLogonEx when we can get
    unencrypted session keys; (bso#8599).
  • Correctly handle DENY ACEs when privileges apply;
  • s3:smb2_server: fix a logic error, we should sign non
    guest sessions; (bso8749).
  • Allow vfs_aio_pthread to build as a static module;
  • s3:dbwrap_ctdb: return the number of records in
    db_ctdb_traverse() for persistent dbs; (#bso8527).
  • s3: segfault in dom_sid_compare(bso#8567).
  • Honor SeTakeOwnershiPrivilege when client asks for
    SEC_STD_WRITE_OWNER; (bso#8768).
  • s3-winbindd: Close netlogon connection if the status
    returned by the NetrSamLogonEx call is timeout in the
    pam_auth_crap path; (bso#8771).
  • s3-winbindd: set the can_do_validation6 also for
    trusted domain; (bso#8599).
  • Fix problem when calculating the share security mask,
    take priviliges into account for the connecting user;
  • Fix crash in dcerpc_lsa_lookup_sids_noalloc() with
    over 1000 groups; (bso#8807); (bnc#751454).
  • s3-printing: fix crash in printer_list_set_printer();
    (bso#8762); (bnc#746825).
  • s3:winbindd fix a return code check; (bso#8406).
  • s3: Add rmdir operation to streams_depot; (bso#8733).
  • s3:smbd:smb2: fix an assignment-instead-of-check bug
    conn_snum_used(); (bso#8738).
  • s3:auth: fill the sids array of the info3 in
    wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739).
  • Do not map POSIX execute permission to Windows
    FILE_READ_ATTRIBUTES; (bso#8631); (bnc#732572).
  • Remove all precompiled idl output to ensure any pidl
    changes take effect; (bnc#757080).