[ubuntu/intrepid-security] samba, samba_3.2.3-1ubuntu3.8_hppa_translations.tar.gz, samba_3.2.3-1ubuntu3.8_amd64_translations.tar.gz, samba_3.2.3-1ubuntu3.8_powerpc_translations.tar.gz, samba_3.2.3-1ubuntu3.8_lpia_translations.tar.gz, samba_3.2.3-1ubuntu3.8_ia64_translations.tar.gz, samba_3.2.3-1ubuntu3.8_i386_translations.tar.gz, samba_3.2.3-1ubuntu3.8_sparc_translations.tar.gz (delayed) 2:3.2.3-1ubuntu3.8 (Accepted)

[Ubuntu Installer]

samba (2:3.2.3-1ubuntu3.8) intrepid-security; urgency=low

  * SECURITY UPDATE: arbitrary file disclosure via wide links
    - debian/patches/security-CVE-2010-0926.patch: disable wide links when
      UNIX extensions are enabled in source/param/loadparm.c,
      source/smbd/service.c, source/smbd/trans2.c, source/smbd/vfs.c,
      docs/htmldocs/manpages/smb.conf.5.html and docs/manpages/smb.conf.5.
    - CVE-2010-0926
  * WARNING: This changes the default samba behaviour. For security
    reasons, it is no longer possible to use wide links and UNIX
    extensions at the same time. After applying this security update, wide
    links will be disabled automatically as UNIX extensions are turned on
    by default. If wide links are required, you may re-enable them by
    adding "unix extensions = no" to the [global] section of
    the /etc/samba/smb.conf configuration file.

Date: Thu, 18 Mar 2010 15:08:42 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/intrepid/+source/samba/2:3.2.3-1ubuntu3.8
-------------- next part --------------
Format: 1.8
Date: Thu, 18 Mar 2010 15:08:42 -0400
Source: samba
Binary: samba samba-common samba-tools smbclient swat samba-doc samba-doc-pdf smbfs libpam-smbpass libsmbclient libsmbclient-dev winbind samba-dbg libwbclient0
Architecture: source
Version: 2:3.2.3-1ubuntu3.8
Distribution: intrepid-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libpam-smbpass - pluggable authentication module for SMB/CIFS password database
 libsmbclient - shared library that allows applications to talk to SMB/CIFS serve
 libsmbclient-dev - libsmbclient static libraries and headers
 libwbclient0 - client library for interfacing with winbind service
 samba      - a LanManager-like file and printer server for Unix
 samba-common - Samba common files used by both the server and the client
 samba-dbg  - Samba debugging symbols
 samba-doc  - Samba documentation
 samba-doc-pdf - Samba documentation (PDF format)
 samba-tools - tools provided by the Samba suite
 smbclient  - a LanManager-like simple client for Unix
 smbfs      - mount and umount commands for the smbfs (for kernels >= than 2.2.
 swat       - Samba Web Administration Tool
 winbind    - service to resolve user and group information from Windows NT ser
Changes: 
 samba (2:3.2.3-1ubuntu3.8) intrepid-security; urgency=low
 .
   * SECURITY UPDATE: arbitrary file disclosure via wide links
     - debian/patches/security-CVE-2010-0926.patch: disable wide links when
       UNIX extensions are enabled in source/param/loadparm.c,
       source/smbd/service.c, source/smbd/trans2.c, source/smbd/vfs.c,
       docs/htmldocs/manpages/smb.conf.5.html and docs/manpages/smb.conf.5.
     - CVE-2010-0926
   * WARNING: This changes the default samba behaviour. For security
     reasons, it is no longer possible to use wide links and UNIX
     extensions at the same time. After applying this security update, wide
     links will be disabled automatically as UNIX extensions are turned on
     by default. If wide links are required, you may re-enable them by
     adding "unix extensions = no" to the [global] section of
     the /etc/samba/smb.conf configuration file.
Checksums-Sha1: 
 52315869e0dc2a3f943759aadf02b0699f8a96f8 1903 samba_3.2.3-1ubuntu3.8.dsc
 451b646a49e0b2d488982811a684ac33becae856 244237 samba_3.2.3-1ubuntu3.8.diff.gz
Checksums-Sha256: 
 d7fb02a7130ea9651606da3c4ca57e590c40aa627ceb2cba211c03ac4ff2d234 1903 samba_3.2.3-1ubuntu3.8.dsc
 191fb4eb772dcd7d0aa528fd31121502350f7f12b5c388f4be3a404781260dea 244237 samba_3.2.3-1ubuntu3.8.diff.gz
Files: 
 62d26c51a82ff94baf9d154e5920dc12 1903 net optional samba_3.2.3-1ubuntu3.8.dsc
 eb681a06f813ed46f9598ceebde32ffd 244237 net optional samba_3.2.3-1ubuntu3.8.diff.gz
Original-Maintainer: Debian Samba Maintainers <pkg-samba-maint at lists.alioth.debian.org>