File _patchinfo of Package patchinfo.3817
<patchinfo incident="3817"> <packager>lmuelle</packager> <issue tracker="bnc" id="906336">AUDIT-0: security audit for cups-backend-kerberized-smb in OBS project Printing</issue> <issue tracker="bnc" id="901813">Renaming a samba printer after driver assignment confuses printer to be renamed</issue> <issue tracker="bnc" id="910378">Print Jobs Disappears From The Print Queue Display</issue> <issue tracker="bnc" id="912457">L3: sporadic incomplete group membership info on winbind</issue> <issue tracker="bnc" id="913304">idmap_rid examples in doc using deprecated parameters</issue> <issue tracker="bnc" id="923374">vfs_btrfs incorrectly uses errno for snapshot ioctl errors</issue> <issue tracker="bnc" id="931854">Use after free panic in winbindd epoll_event_loop</issue> <issue tracker="bso" id="10016"></issue> <issue tracker="bso" id="10240"></issue> <issue tracker="bso" id="10808"></issue> <issue tracker="bso" id="10888"></issue> <issue tracker="bso" id="10984"></issue> <issue tracker="bso" id="11008"></issue> <issue tracker="bso" id="11018"></issue> <issue tracker="bso" id="11037"></issue> <issue tracker="bso" id="11041"></issue> <issue tracker="bso" id="11051"></issue> <issue tracker="bso" id="11058"></issue> <issue tracker="bso" id="11059"></issue> <issue tracker="bso" id="11066"></issue> <issue tracker="bso" id="11069"></issue> <issue tracker="bso" id="11079"></issue> <issue tracker="bso" id="11094"></issue> <issue tracker="bso" id="11100"></issue> <issue tracker="bso" id="11115"></issue> <issue tracker="bso" id="11117"></issue> <issue tracker="bso" id="11127"></issue> <issue tracker="bso" id="11141"></issue> <issue tracker="bso" id="11143"></issue> <issue tracker="bso" id="11144"></issue> <issue tracker="bso" id="11164"></issue> <issue tracker="bso" id="11169"></issue> <issue tracker="bso" id="11173"></issue> <issue tracker="bso" id="11177"></issue> <issue tracker="bso" id="11180"></issue> <issue tracker="bso" id="11185"></issue> <issue tracker="bso" id="11186"></issue> <issue tracker="bso" id="11187"></issue> <issue tracker="bso" id="11210"></issue> <issue tracker="bso" id="11224"></issue> <issue tracker="bso" id="11225"></issue> <issue tracker="bso" id="11226"></issue> <issue tracker="bso" id="11234"></issue> <issue tracker="bso" id="11236"></issue> <issue tracker="bso" id="11240"></issue> <issue tracker="bso" id="11243"></issue> <issue tracker="bso" id="11254"></issue> <issue tracker="bso" id="8905"></issue> <issue tracker="bso" id="9702"></issue> <category>recommended</category> <rating>important</rating> <summary>Recommended update for samba, permissions, samba-krb-printing and talloc</summary> <description>This recommended update provides version 4.1.18 of samba and fixes for permissions, talloc and samba-krb-printing: - samba: + Avoid a crash inside the tevent epoll backend (bso#11141, bnc#931854). + Remove the independently built libraries ldb, talloc, tdn, and tevent and the post-10.3 renamed libsmbclient from baselibs.conf. + s3:winbind:grent: Don't stop group enumeration when a group has no gid (bso#8905). + s3:smb2_server: protect against integer wrap with "smb2 max credits = 65535" (bso#9702). + Fix NTLM authentication (bso#10016). + vfs: Add glusterfs manpage; (bso#10240). + printing/cups: Pack requested-attributes with IPP_TAG_KEYWORD; (bso#10808, bnc#910378). + s3: client - "client use spnego principal = yes" code checks wrong name; (bso#10888). + spoolss: Clear PrinterInfo on GetPrinter error; (bso#10984). + s3-util: Fix authentication with long hostnames; (bso#11008). + smbd can't find the GUID for a printer in the registry and fails to publish printers; (bso#11018). + s3-libads: Fix a possible segfault in kerberos_fetch_pac(); (bso#11037). + smbd: Fix CID 1063259 Uninitialized scalar variable; (bso#11041). + net: Fix 'net sam addgroupmem'; (bso#11051). + cli_connect_nb_send: don't segfault on host == NULL; (bso#11058). + utils: Fix 'net time' segfault; (bso#11058). + libsmb: Provide authinfo domain for encrypted session referrals; (bso#11059). + s3-pam_smbpass: Fix memory leak in pam_sm_authenticate(); (bso#11066). + vfs_glusterfs: Add comments to the pipe(2) code; (bso#11069). + s3: lib: libsmbclient: If reusing a server struct, check every cli->timout miliseconds if it's still valid before use; (bso#11079). + s3: smbclient: Allinfo leaves the file handle open; (bso#11094). + debug: Set close-on-exec for the main log file FD; (bso#11100). + smbd: Stop using vfs_Chdir after SMB_VFS_DISCONNECT; (bso#11115). + vfs_glusterfs manpage corrections; (bso#11117). + doc-xml: Add 'sharesec' reference to 'access based share enum'; (bso#11127). + s3-winbind: Fix chached user group lookup of trusted domains; (bso#11143). + Fix memory leak in SMB2 notify handling; (bso#11144). + Fix memory leak in SMB2 notify handling; (bso#11144). + s4:auth/gensec_gssapi: let gensec_gssapi_update() return NT_STATUS_LOGON_FAILURE for unknown errors; (bso#11164). + docs/idmap_rid: Remove deprecated base_rid from example; (bso#11169, bnc#913304). + s3: libcli: smb1: Ensure we correctly finish a tevent req if the writev fails in the SMB1 case; (bso#11173). + s3: libsmbclient: Add missing talloc stackframe; (bso#11177). + s4-process_model: Do not close random fds while forking; (bso#11180). + s3-passdb: Fix 'force user' with winbind default domain; (bso#11185). + s3: libsmbclient: After getting attribute server, ensure main srv pointer is still valid; (bso#11186). + s3: Mac OS X 10.10.x fails validate negotiate request to 4.1.x; (bso#11187). + spoolss: Purge the printer name cache on name change; (bso#11210, bnc#901813). + s3:smbd: Missing tevent_req_nterror; (bso#11224). + s4:rpc_server: Add multiplex state to dcerpc flags and control over multiplex PFC flag in bind_ack and and dcesrv_alter replies; (bso#11225). + Fix terminate connection behavior for asynchronous endpoint with PUSH notification flavors; (bso#11226). + Fix crash in 'net ads dns gethostbyname' with an error in TALLOC_FREE if you enter invalid values; (bso#11234). + s4: rpc: Refactor dcesrv_alter() function into setup and send steps; (bso#11236). + s3: smbd: Incorrect file size returned in the response of "FILE_SUPERSEDE Create"; (bso#11240). + vfs: kernel_flock and named streams; (bso#11243). + s3: nmbd: Don't set work_changed = True inside update_server_ttl(); (bso#11254). + Take resource group sids into account when caching netsamlogon data; (bnc#912457). + Prevent samba package updates from disabling samba kerberos printing. + Purge printer name cache on spoolss SetPrinter change; (bso#11210, bnc#901813). + Correctly retain errno from Btrfs snapshot ioctls; (bnc#923374). + Fix tdb_store_flag_to_ntdb() gcc5 build failure. - talloc: + Fix memory leak in SMB2 notify handling; (bso#11144). + fix _talloc_total_limit_size prototype + build: improve detection of srcdir - permissions: + remove /usr/bin/get_printing_ticket; (bnc#906336) - samba-krb-printing: + new package to provide get_printing_ticket binary stand-alone.</description> </patchinfo>
