samba 2:3.2.3-1ubuntu3.6 source package in Ubuntu

Changelog

samba (2:3.2.3-1ubuntu3.6) intrepid-security; urgency=low

  * SECURITY UPDATE: denial of service via string vulnerabilities in
    smbclient
    - debian/patches/security-CVE-2009-1886.patch: fix string format
      vulnerabilities in source/client/client.c.
    - CVE-2009-1886
  * SECURITY UPDATE: access control list modification when dos filemode is
    enabled
    - debian/patches/security-CVE-2009-1888.patch: fix group checking in
      acl_group_override in source/smbd/posix_acls.c.
    - CVE-2009-1888
  * SECURITY UPDATE: whole filesystem share via user with no home directory
    - debian/patches/security-CVE-2009-2813.patch: make sure home directory
      is set in source/param/loadparm.c, source/smbd/service.c.
    - CVE-2009-2813
  * SECURITY UPDATE: credentials file disclosure and unauthorized usage via
    setuid mount.cifs
    - debian/patches/security-CVE-2009-2948.patch: don't open credentials
      file if user doesn't have permission, and don't print password when
      using verbose option in source/client/mount.cifs.c.
    - CVE-2009-2948
  * SECURITY UPDATE: denial of service via unexpected oplock break
    notification reply
    - debian/patches/security-CVE-2009-2906.patch: track messages already
      processed in source/include/smb.h, source/smbd/process.c.
    - CVE-2009-2906

 -- Marc Deslauriers <email address hidden>   Thu, 01 Oct 2009 08:39:00 -0400