-------------------------------------------------------------------------- Turbolinux Security Advisory TLSA-2002-90 http://www/turbolinux.co.jp/security/ security-team@turbolinux.co.jp -------------------------------------------------------------------------- Samba Winbindd memory leak Release date : 2002-12-13 Solution: package : samba-2.2.4-5jaJP Problematical point * When the winbindd is started in an environment in which the Winbind cannot be used, memory leaks may occur. * The environment which cannot use the samba (when the Windows resource cannot be utilized), When samba service has started, memory leak in the cord/code itself of the samba occurs. Please stop samba service. Solution: Using turbopkg command, please do automatic operation update. When necessary, update is done automatically. Use the following command to verify the version currently installed. # rpm -qa | grep package name When automatic operation update is used, those which are presently are installed update all objects. Select the package, and use the rpm command to select when you would like to update. Execution example --------------------------------------------------------------------- 1. In super user modification $ su - 2. Password of super user input Password: 3. Starting the turbopkg # turbopkg 4. Menu selection " Update " " FTP server " " Update sight " Optional sight selection 5. In general user modification # exit --------------------------------------------------------------------- < Turbolinux 8 Server > < Turbolinux 8 Workstation > samba-2.2.4-5jaJP.i586.rpm samba-devel-2.2.4-5jaJP.i586.rpm smbfs-2.2.4-5jaJP.i586.rpm < Turbolinux 7 Server > < Turbolinux 7 Workstation > < Turbolinux Server 6.5 > < Turbolinux Advanced Server 6 > < Turbolinux Server 6.1 > < Turbolinux Workstation 6.0 > * This problem does not correspond. * Upon the maintenance of our company FTP sight, we determined that update of the turbopkg is neccesary. Details the below-mentioned URL reference. http://www.turbolinux.co.jp/download/zabom.html Package updates: http://www.turbolinux.co.jp/update/