Solution
Please Install the Updated Packages.
Insight
- Add the ldapsmb sources as else patches against them have no chance to apply.
- Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the "
root"
user
PIDL
based autogenerated code allows overwriting beyond of allocated array
CVE-2012-1182
(bso#8815)
(bnc#752797).
- s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys
(bso#8599).
- Correctly handle DENY ACEs when privileges apply
(bso#8797).
- s3:smb2_server: fix a logic error, we should sign non guest sessions
(bso8749).
- Allow vfs_aio_pthread to build as a static module
(bso#8723).
- s3:dbwrap_ctdb: return the number of records in
db_ctdb_traverse() for persistent dbs
(#bso8527).
- s3: segfault in dom_sid_compare(bso#8567).
- Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER
(bso#8768).
- s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path
(bso#8771).
- s3-winbindd: set the can_do_validation6 also for trusted domain
(bso#8599).
- Fix problem when calculating the share security mask, take priviliges into account for the connecting user
(bso#8784).
- Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups
(bso#8807)
(bnc#751454).
- Remove obsoleted Authors lines from spec file for post-11.2 systems.
- Make ldapsmb build with Fedora 15 and 16
(bso#8783).
- BuildRequire libuuid-devel for post-11.0 and other systems.
- Define missing python macros for non SUSE systems.
- PreReq to fillup_prereq and insserv_prereq only on SUSE systems.
- Always use cifstab instead of smbfstab on non SUSE systems.
- Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions
CVE-2012-0870
(bnc#747934).
- Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY
(bso#8760)
(bnc#741854).
- s3-printing: fix crash in printer_list_set_printer()
(bso#8762)
(bnc#746825).
Affected
update on openSUSE 12.1
Severity
Classification
-
CVE CVE-2012-0870, CVE-2012-1182 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities