openSUSE Security Update: update for samba
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2013:1339-1
Rating:             important
References:         #765270 #798856 #806501 #812929 #817919 #820531 
                    #823549 #824833 #829969 
Cross-References:   CVE-2013-4124
Affected Products:
                    openSUSE 12.2
______________________________________________________________________________

   An update that solves one vulnerability and has 8 fixes is
   now available.

Description:

   This update of samba fixed the following issues:

   - The pam_winbind require_membership_of option allows for a
   list of SID, but currently only provides buffer space for
   ~20; (bnc#806501).

   - Samba 3.0.x to 4.0.7 are affected by a denial of service
   attack on authenticated or guest connections;
   CVE-2013-4124; (bnc#829969).

   - PIDL: fix parsing linemarkers in preprocessor output;
   (bso#9636).
   - build:autoconf: fix output of syslog-facility check;
   (bso#9983).
   - libreplace: add a missing "eval" to the
   AC_VERIFY_C_PROTOTYPE macro.

   - Remove ldapsmb from the main spec file.

   - Don't bzip2 the main tar ball, use the upstream gziped
   one instead.

   - Fix crash bug during Win8 sync; (bso#9822).
   - Check for system libtevent and link dbwrap_tool and
   dbwrap_torture against it; (bso#9881).
   - errno gets overwritten in call to check_parent_exists();
   (bso#9927).
   - Fix a bug of drvupgrade of smbcontrol; (bso#9941).

   - Document idmap_ad rfc2307 attribute requirements;
   (bso#9880); (bnc#820531).

   - Don't install the tdb utilities man pages on post-12.1
   systems; (bnc#823549).

   - Fix libreplace license ambiguity; (bso#8997);
   (bnc#765270).

   - Fix is_printer_published GUID retrieval; (bso#9900);
   (bnc#798856).

   - Fix 'map untrusted to domain' with NTLMv2; (bso#9817);
   (bnc#817919).
   - Don't modify the pidfile name when a custom config file
   path is used; (bnc#812929).

   - Add extra attributes for AD printer publishing;
   (bso#9378); (bnc#798856).
   - Fix vfs_catia module; (bso#9701); (bnc#824833).

   - Fix AD printer publishing; (bso#9378); (bnc#798856).


Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 12.2:

      zypper in -t patch openSUSE-2013-644

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE 12.2 (i586 x86_64):

      libnetapi-devel-3.6.7-48.24.1
      libnetapi0-3.6.7-48.24.1
      libnetapi0-debuginfo-3.6.7-48.24.1
      libsmbclient-devel-3.6.7-48.24.1
      libsmbclient0-3.6.7-48.24.1
      libsmbclient0-debuginfo-3.6.7-48.24.1
      libsmbsharemodes-devel-3.6.7-48.24.1
      libsmbsharemodes0-3.6.7-48.24.1
      libsmbsharemodes0-debuginfo-3.6.7-48.24.1
      libwbclient-devel-3.6.7-48.24.1
      libwbclient0-3.6.7-48.24.1
      libwbclient0-debuginfo-3.6.7-48.24.1
      samba-3.6.7-48.24.1
      samba-client-3.6.7-48.24.1
      samba-client-debuginfo-3.6.7-48.24.1
      samba-debuginfo-3.6.7-48.24.1
      samba-debugsource-3.6.7-48.24.1
      samba-devel-3.6.7-48.24.1
      samba-krb-printing-3.6.7-48.24.1
      samba-krb-printing-debuginfo-3.6.7-48.24.1
      samba-winbind-3.6.7-48.24.1
      samba-winbind-debuginfo-3.6.7-48.24.1

   - openSUSE 12.2 (x86_64):

      libsmbclient0-32bit-3.6.7-48.24.1
      libsmbclient0-debuginfo-32bit-3.6.7-48.24.1
      libwbclient0-32bit-3.6.7-48.24.1
      libwbclient0-debuginfo-32bit-3.6.7-48.24.1
      samba-32bit-3.6.7-48.24.1
      samba-client-32bit-3.6.7-48.24.1
      samba-client-debuginfo-32bit-3.6.7-48.24.1
      samba-debuginfo-32bit-3.6.7-48.24.1
      samba-winbind-32bit-3.6.7-48.24.1
      samba-winbind-debuginfo-32bit-3.6.7-48.24.1

   - openSUSE 12.2 (noarch):

      samba-doc-3.6.7-48.24.1


References:

   https://www.suse.com/security/cve/CVE-2013-4124.html
   https://bugzilla.novell.com/765270
   https://bugzilla.novell.com/798856
   https://bugzilla.novell.com/806501
   https://bugzilla.novell.com/812929
   https://bugzilla.novell.com/817919
   https://bugzilla.novell.com/820531
   https://bugzilla.novell.com/823549
   https://bugzilla.novell.com/824833
   https://bugzilla.novell.com/829969