[ubuntu/hardy-security] samba_3.0.28a-1ubuntu4.15_hppa_translations.tar.gz, samba_3.0.28a-1ubuntu4.15_lpia_translations.tar.gz, samba, samba_3.0.28a-1ubuntu4.15_ia64_translations.tar.gz, samba_3.0.28a-1ubuntu4.15_amd64_translations.tar.gz, samba_3.0.28a-1ubuntu4.15_sparc_translations.tar.gz, samba_3.0.28a-1ubuntu4.15_i386_translations.tar.gz, samba_3.0.28a-1ubuntu4.15_powerpc_translations.tar.gz 3.0.28a-1ubuntu4.15 (Accepted)

[Marc Deslauriers]

samba (3.0.28a-1ubuntu4.15) hardy-security; urgency=low

  * SECURITY UPDATE: cross-site scripting in SWAT
    - debian/patches/security-CVE-2011-2694.patch: don't display username
      in source/web/swat.c.
    - CVE-2011-2694
  * SECURITY UPDATE: cross-site request forgery in SWAT
    - debian/patches/security-CVE-2011-2522.patch: implement nonce in
      source/web/{cgi.c,statuspage.c,swat.c}.
    - CVE-2011-2522

Date: Thu, 28 Jul 2011 10:20:20 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/hardy/+source/samba/3.0.28a-1ubuntu4.15
-------------- next part --------------
Format: 1.7
Date: Thu, 28 Jul 2011 10:20:20 -0400
Source: samba
Binary: samba samba-common smbclient swat samba-doc samba-doc-pdf smbfs libpam-smbpass libsmbclient libsmbclient-dev winbind samba-dbg
Architecture: source
Version: 3.0.28a-1ubuntu4.15
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libpam-smbpass - pluggable authentication module for SMB/CIFS password database
 libsmbclient - shared library that allows applications to talk to SMB/CIFS serve
 libsmbclient-dev - libsmbclient static libraries and headers
 samba      - a LanManager-like file and printer server for Unix
 samba-common - Samba common files used by both the server and the client
 samba-dbg  - Samba debugging symbols
 samba-doc  - Samba documentation
 samba-doc-pdf - Samba documentation (PDF format)
 smbclient  - a LanManager-like simple client for Unix
 smbfs      - mount and umount commands for the smbfs (for kernels >= than 2.2.
 swat       - Samba Web Administration Tool
 winbind    - service to resolve user and group information from Windows NT ser
Changes: 
 samba (3.0.28a-1ubuntu4.15) hardy-security; urgency=low
 .
   * SECURITY UPDATE: cross-site scripting in SWAT
     - debian/patches/security-CVE-2011-2694.patch: don't display username
       in source/web/swat.c.
     - CVE-2011-2694
   * SECURITY UPDATE: cross-site request forgery in SWAT
     - debian/patches/security-CVE-2011-2522.patch: implement nonce in
       source/web/{cgi.c,statuspage.c,swat.c}.
     - CVE-2011-2522
Files: 
 726fe35a273f5e065420510bbf2457cb 2224 net optional samba_3.0.28a-1ubuntu4.15.dsc
 0f1162b430b19c07d4a016f510891ec8 243541 net optional samba_3.0.28a-1ubuntu4.15.diff.gz
Original-Maintainer: Debian Samba Maintainers <pkg-samba-maint at lists.alioth.debian.org>