[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Samba security updates held back on Jessie server



Yup, the issue appears to be that python-samba requires python-talloc 2.1.6 and only 2.1.2 is available in Jessie.  This was probably a typo.  The prior python-samba package only required 2.0.6.  I've reported this to the bug tracker.

jason@storage-server:~$ apt show python-samba -a
Package: python-samba
Source: samba
Version: 2:4.2.14+dfsg-0+deb8u7
Installed-Size: 7,250 kB
Maintainer: Debian Samba Maintainers
<pkg-samba-maint@lists.alioth.debian.org>
Provides: python2.7-samba
Depends: python-ldb (>= 1.1.2~), python-tdb, python-ntdb, python-crypto,
python (<< 2.8), python (>= 2.7), python:any (>= 2.6.6-7~), libattr1 (>=
1:2.4.46-8), libbsd0 (>= 0.0), libc6 (>= 2.14), libldb1 (>= 0.9.21),
libpython2.7 (>= 2.7), libtalloc2 (>= 2.0.4~git20101213), libtevent0 (>=
0.9.16), python-talloc (>= 2.1.6), samba-libs (= 2:4.2.14+dfsg-0+deb8u7)
Homepage: http://www.samba.org
Section: python
Priority: optional
Download-Size: 1,046 kB
APT-Sources: http://security.debian.org/ jessie/updates/main amd64 Packages
Description: Python bindings for Samba
 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file sharing with Microsoft
Windows, OS X,
 and other Unix systems.  Samba can also function as a domain controller
 or member server in both NT4-style and Active Directory domains.
 .
 This package contains Python bindings for most Samba libraries.

Package: python-samba
Status: install ok installed
Priority: optional
Section: python
Installed-Size: 7,054 kB
Maintainer: Debian Samba Maintainers
<pkg-samba-maint@lists.alioth.debian.org>
Source: samba
Version: 2:4.2.14+dfsg-0+deb8u6
Provides: python2.7-samba
Depends: python-ldb (>= 1.1.2~), python-tdb, python-ntdb, python-crypto,
python (>= 2.7), python (<< 2.8), libattr1 (>= 1:2.4.46-8), libbsd0 (>=
0.0), libc6 (>= 2.14), libldb1 (>= 0.9.21), libpython2.7 (>= 2.7),
libtalloc2 (>= 2.0.4~git20101213), libtevent0 (>= 0.9.16), python-talloc
(>= 2.0.6), samba-libs (= 2:4.2.14+dfsg-0+deb8u6)
Homepage: http://www.samba.org
Download-Size: unknown
APT-Manual-Installed: no
APT-Sources: /var/lib/dpkg/status
Description: Python bindings for Samba
 Samba is an implementation of the SMB/CIFS protocol for Unix systems,
 providing support for cross-platform file sharing with Microsoft
Windows, OS X,
 and other Unix systems.  Samba can also function as a domain controller
 or member server in both NT4-style and Active Directory domains.
 .
 This package contains Python bindings for most Samba libraries.

Actual version of python-talloc available in Jessie:

Package: python-talloc
Source: talloc
Version: 2.1.2-0+deb8u1
Installed-Size: 79.9 kB
Maintainer: Debian Samba Maintainers
<pkg-samba-maint@lists.alioth.debian.org>
Provides: python2.7-talloc
Depends: libc6 (>= 2.2.5), libpython2.7 (>= 2.7), libtalloc2 (>=
2.0.4~git20101213), python (>= 2.7), python (<< 2.8)
Pre-Depends: multiarch-support
Homepage: http://talloc.samba.org/
Tag: devel::lang:c, devel::library, implemented-in::c, role::devel-lib
Section: python
Priority: optional
Download-Size: 10.4 kB
APT-Manual-Installed: yes
APT-Sources: http://ftp.us.debian.org/debian/ jessie/main amd64 Packages
Description: hierarchical pool based memory allocator - Python bindings
 A hierarchical pool based memory allocator with destructors. It uses
 reference counting to determine when memory should be freed.
 .
 This package contains the Python bindings.


On 07/14/2017 10:17 AM, Jason Cohen wrote:
Hello everyone,

I attempted to update my Jessie server this morning after seeing the
Samba DSA.  However, it appears that there are unmet dependencies that
are causing several of the samba packages to be held back.  Anyone
seeing this or know of a resolution?

12 packages can be upgraded. Run 'apt list --upgradable' to see them.
root@storage-server:/etc/apt/sources.list.d# apt list --upgradable
Listing... Done
ctdb/oldstable 2:4.2.14+dfsg-0+deb8u7 amd64 [upgradable from:
2:4.2.14+dfsg-0+deb8u6]
libsmbclient/oldstable 2:4.2.14+dfsg-0+deb8u7 amd64 [upgradable from:
2:4.2.14+dfsg-0+deb8u6]
libwbclient0/oldstable 2:4.2.14+dfsg-0+deb8u7 amd64 [upgradable from:
2:4.2.14+dfsg-0+deb8u6]
python-samba/oldstable 2:4.2.14+dfsg-0+deb8u7 amd64 [upgradable from:
2:4.2.14+dfsg-0+deb8u6]
samba/oldstable 2:4.2.14+dfsg-0+deb8u7 amd64 [upgradable from:
2:4.2.14+dfsg-0+deb8u6]
samba-common/oldstable 2:4.2.14+dfsg-0+deb8u7 all [upgradable from:
2:4.2.14+dfsg-0+deb8u6]
samba-common-bin/oldstable 2:4.2.14+dfsg-0+deb8u7 amd64 [upgradable
from: 2:4.2.14+dfsg-0+deb8u6]
samba-dbg/oldstable 2:4.2.14+dfsg-0+deb8u7 amd64 [upgradable from:
2:4.2.14+dfsg-0+deb8u6]
samba-doc/oldstable 2:4.2.14+dfsg-0+deb8u7 all [upgradable from:
2:4.2.14+dfsg-0+deb8u6]
samba-dsdb-modules/oldstable 2:4.2.14+dfsg-0+deb8u7 amd64 [upgradable
from: 2:4.2.14+dfsg-0+deb8u6]
samba-libs/oldstable 2:4.2.14+dfsg-0+deb8u7 amd64 [upgradable from:
2:4.2.14+dfsg-0+deb8u6]
samba-vfs-modules/oldstable 2:4.2.14+dfsg-0+deb8u7 amd64 [upgradable
from: 2:4.2.14+dfsg-0+deb8u6]

root@storage-server:~# apt upgrade
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Calculating upgrade... The following package was automatically installed
and is no longer required:
  linux-image-4.9.0-0.bpo.2-amd64
Use 'apt-get autoremove' to remove it.
Done
The following packages have been kept back:
  ctdb samba samba-common samba-dbg samba-dsdb-modules
The following packages will be upgraded:
  libwbclient0 samba-doc
2 upgraded, 0 newly installed, 0 to remove and 5 not upgraded.
Need to get 441 kB of archives.
After this operation, 51.2 kB disk space will be freed.

root@storage-server:~# apt full-upgrade
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Calculating upgrade... The following packages were automatically
installed and are no longer required:
  attr ctdb linux-image-4.9.0-0.bpo.2-amd64 samba-dsdb-modules
Use 'apt-get autoremove' to remove them.
Done
The following packages will be REMOVED:
  samba samba-common-bin samba-dbg
The following packages have been kept back:
  ctdb samba-dsdb-modules
The following packages will be upgraded:
  libwbclient0 samba-common samba-doc
3 upgraded, 0 newly installed, 3 to remove and 2 not upgraded.
Need to get 705 kB of archives.
After this operation, 49.8 MB disk space will be freed.

The problem appears to be with python-samba.  It depends on
python-talloc >= 2.1.6, but Jessie has version 2.1.2.  As a result, the
packages cannot be updated.

Package: python-samba
Source: samba
Version: 2:4.2.14+dfsg-0+deb8u7
Installed-Size: 7,250 kB
Maintainer: Debian Samba Maintainers
<pkg-samba-maint@lists.alioth.debian.org>
Provides: python2.7-samba
Depends: python-ldb (>= 1.1.2~), python-tdb, python-ntdb, python-crypto,
python (<< 2.8), python (>= 2.7), python:any (>= 2.6.6-7~), libattr1 (>=
1:2.4.46-8), libbsd0 (>= 0.0), libc6 (>= 2.14), libldb1 (>= 0.9.21),
libpython2.7 (>= 2.7), libtalloc2 (>= 2.0.4~git20101213), libtevent0 (>=
0.9.16), python-talloc (>= 2.1.6), samba-libs (= 2:4.2.14+dfsg-0+deb8u7)







Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: