[ubuntu/lucid-security] samba_3.4.7~dfsg-1ubuntu3.7_powerpc_translations.tar.gz, samba, samba_3.4.7~dfsg-1ubuntu3.7_ia64_translations.tar.gz, samba_3.4.7~dfsg-1ubuntu3.7_sparc_translations.tar.gz, samba_3.4.7~dfsg-1ubuntu3.7_amd64_translations.tar.gz, samba_3.4.7~dfsg-1ubuntu3.7_armel_translations.tar.gz, samba_3.4.7~dfsg-1ubuntu3.7_i386_translations.tar.gz 2:3.4.7~dfsg-1ubuntu3.7 (Accepted)

[Marc Deslauriers]

samba (2:3.4.7~dfsg-1ubuntu3.7) lucid-security; urgency=low

  * SECURITY UPDATE: cross-site scripting in SWAT
    - debian/patches/CVE-2011-2694.patch: don't display username in
      source3/web/swat.c.
    - CVE-2011-2694
  * SECURITY UPDATE: cross-site request forgery in SWAT
    - debian/patches/CVE-2011-2522.patch: implement nonce in
      source3/web/{cgi.c,statuspage.c,swat.c,swat_proto.h}.
    - CVE-2011-2522

Date: Thu, 28 Jul 2011 09:39:38 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/samba/2:3.4.7~dfsg-1ubuntu3.7
-------------- next part --------------
Format: 1.8
Date: Thu, 28 Jul 2011 09:39:38 -0400
Source: samba
Binary: samba samba-common-bin samba-common samba-tools smbclient swat samba-doc samba-doc-pdf smbfs libpam-smbpass libsmbclient libsmbclient-dev winbind samba-dbg libwbclient0
Architecture: source
Version: 2:3.4.7~dfsg-1ubuntu3.7
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libpam-smbpass - pluggable authentication module for Samba
 libsmbclient - shared library for communication with SMB/CIFS servers
 libsmbclient-dev - development files for libsmbclient
 libwbclient0 - Samba winbind client library
 samba      - SMB/CIFS file, print, and login server for Unix
 samba-common - common files used by both the Samba server and client
 samba-common-bin - common files used by both the Samba server and client
 samba-dbg  - Samba debugging symbols
 samba-doc  - Samba documentation
 samba-doc-pdf - Samba documentation in PDF format
 samba-tools - Samba testing utilities
 smbclient  - command-line SMB/CIFS clients for Unix
 smbfs      - Samba file system utilities
 swat       - Samba Web Administration Tool
 winbind    - Samba nameservice integration server
Changes: 
 samba (2:3.4.7~dfsg-1ubuntu3.7) lucid-security; urgency=low
 .
   * SECURITY UPDATE: cross-site scripting in SWAT
     - debian/patches/CVE-2011-2694.patch: don't display username in
       source3/web/swat.c.
     - CVE-2011-2694
   * SECURITY UPDATE: cross-site request forgery in SWAT
     - debian/patches/CVE-2011-2522.patch: implement nonce in
       source3/web/{cgi.c,statuspage.c,swat.c,swat_proto.h}.
     - CVE-2011-2522
Checksums-Sha1: 
 76bff7f9727a40bf9d1e5b2bcdb0ad85935a9021 2909 samba_3.4.7~dfsg-1ubuntu3.7.dsc
 b05a1fa2b6723a48019cd0864b4ee467c5cd0b50 510764 samba_3.4.7~dfsg-1ubuntu3.7.debian.tar.gz
Checksums-Sha256: 
 9b4bc0ebb5b35bd124b7120b5340fe4ec91a60e49517f6555d401feafa16414b 2909 samba_3.4.7~dfsg-1ubuntu3.7.dsc
 71cf860b30443136fe768d1e20df43fa2e6d54b2600ea483ae4a4464cfaccbc7 510764 samba_3.4.7~dfsg-1ubuntu3.7.debian.tar.gz
Files: 
 811b9e486fcf9f6781d54546be9d449e 2909 net optional samba_3.4.7~dfsg-1ubuntu3.7.dsc
 a9d697513568565627af58dac3962872 510764 net optional samba_3.4.7~dfsg-1ubuntu3.7.debian.tar.gz
Original-Maintainer: Debian Samba Maintainers <pkg-samba-maint at lists.alioth.debian.org>