[ubuntu/hardy-security] samba_3.0.28a-1ubuntu4.16_ia64_translations.tar.gz, samba, samba_3.0.28a-1ubuntu4.16_powerpc_translations.tar.gz, samba_3.0.28a-1ubuntu4.16_lpia_translations.tar.gz, samba_3.0.28a-1ubuntu4.16_hppa_translations.tar.gz, samba_3.0.28a-1ubuntu4.16_sparc_translations.tar.gz, samba_3.0.28a-1ubuntu4.16_amd64_translations.tar.gz, samba_3.0.28a-1ubuntu4.16_i386_translations.tar.gz 3.0.28a-1ubuntu4.16 (Accepted)

[Marc Deslauriers]

samba (3.0.28a-1ubuntu4.16) hardy-security; urgency=low

  * Improve mtab locking support to prevent mtab corruption
    - debian/patches/security-mtab-locking.patch: backport mtab locking
      logic from newer releases in source/client/{mount.cifs.c,mount.h,
      mtab.c,umount.cifs.c}, source/Makefile.in.
  * SECURITY UPDATE: denial of service via stale mtab lockfile
    - debian/patches/security-mask-signals.patch: mask signals while
      updating the mtab file in source/client/mount.cifs.c.
    - CVE-2011-3585
  * SECURITY UPDATE: mtab corruption via resource limits
    - debian/patches/CVE-2011-1678.patch: truncate mtab file if updating it
      failed in source/client/{mount.cifs.c,mount.h,mtab.c}.
    - CVE-2011-1678

Date: Fri, 30 Sep 2011 11:48:58 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/hardy/+source/samba/3.0.28a-1ubuntu4.16
-------------- next part --------------
Format: 1.7
Date: Fri, 30 Sep 2011 11:48:58 -0400
Source: samba
Binary: samba samba-common smbclient swat samba-doc samba-doc-pdf smbfs libpam-smbpass libsmbclient libsmbclient-dev winbind samba-dbg
Architecture: source
Version: 3.0.28a-1ubuntu4.16
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libpam-smbpass - pluggable authentication module for SMB/CIFS password database
 libsmbclient - shared library that allows applications to talk to SMB/CIFS serve
 libsmbclient-dev - libsmbclient static libraries and headers
 samba      - a LanManager-like file and printer server for Unix
 samba-common - Samba common files used by both the server and the client
 samba-dbg  - Samba debugging symbols
 samba-doc  - Samba documentation
 samba-doc-pdf - Samba documentation (PDF format)
 smbclient  - a LanManager-like simple client for Unix
 smbfs      - mount and umount commands for the smbfs (for kernels >= than 2.2.
 swat       - Samba Web Administration Tool
 winbind    - service to resolve user and group information from Windows NT ser
Changes: 
 samba (3.0.28a-1ubuntu4.16) hardy-security; urgency=low
 .
   * Improve mtab locking support to prevent mtab corruption
     - debian/patches/security-mtab-locking.patch: backport mtab locking
       logic from newer releases in source/client/{mount.cifs.c,mount.h,
       mtab.c,umount.cifs.c}, source/Makefile.in.
   * SECURITY UPDATE: denial of service via stale mtab lockfile
     - debian/patches/security-mask-signals.patch: mask signals while
       updating the mtab file in source/client/mount.cifs.c.
     - CVE-2011-3585
   * SECURITY UPDATE: mtab corruption via resource limits
     - debian/patches/CVE-2011-1678.patch: truncate mtab file if updating it
       failed in source/client/{mount.cifs.c,mount.h,mtab.c}.
     - CVE-2011-1678
Files: 
 c3923d4fb24200b8b59a016a02aaa6d0 2224 net optional samba_3.0.28a-1ubuntu4.16.dsc
 ba335719ec2abf57bcba1af6ec7ea485 249635 net optional samba_3.0.28a-1ubuntu4.16.diff.gz
Original-Maintainer: Debian Samba Maintainers <pkg-samba-maint at lists.alioth.debian.org>