[Samba] Microsoft hotfix MS04-011, breaks Samba password change.

[Matthias Spork]

Hi all,

Jeremy Allison schrieb:

>Hi all,
>
>	I wanted to give an update on this as I know this MS Hotfix
>is critical and must be applied to protect against the (latest) Microsoft
>worm.
>
>I think I've found the problem in the code, and am currently testing
>a fix for this (not in the release to others to test stage yet). As
>soon as I'm reasonably confident I'll put a patch out there for others
>to test, and we'll probably do a new stable release to ensure this is
>fixed in the current codebase.
>
>Once we know how complex the fix is I'll look at adding it into the
>2.2.x codebase and maybe releasing a 2.2.9 for all the people who are
>satisfied with Samba 2.2.8a and don't want to move to 3.0.x yet.
>
>I'm also very unhappy with Microsoft for releasing improperly tested
>hotfixes, but that's another story I'll probably be taking up with
>the Technical Comittee overseeing the DoJ Microsoft settlement and
>the EU as well.
>  
>
you can find new 303 packets for SuSE at the SerNet FTP-Server:

ftp://ftp.sernet.de/pub/samba/

It corrects the password-change problem.

matze