[ubuntu/maverick-security] samba_3.5.4~dfsg-1ubuntu8.5_amd64_translations.tar.gz, samba_3.5.4~dfsg-1ubuntu8.5_powerpc_translations.tar.gz, samba, samba_3.5.4~dfsg-1ubuntu8.5_armel_translations.tar.gz, samba_3.5.4~dfsg-1ubuntu8.5_i386_translations.tar.gz 2:3.5.4~dfsg-1ubuntu8.5 (Accepted)

[Marc Deslauriers]

samba (2:3.5.4~dfsg-1ubuntu8.5) maverick-security; urgency=low

  * SECURITY UPDATE: cross-site scripting in SWAT
    - debian/patches/CVE-2011-2694.patch: don't display username in
      source3/web/swat.c.
    - CVE-2011-2694
  * SECURITY UPDATE: cross-site request forgery in SWAT
    - debian/patches/CVE-2011-2522.patch: implement nonce in
      source3/web/{cgi.c,statuspage.c,swat.c,swat_proto.h}.
    - CVE-2011-2522

Date: Thu, 28 Jul 2011 08:49:08 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/maverick/+source/samba/2:3.5.4~dfsg-1ubuntu8.5
-------------- next part --------------
Format: 1.8
Date: Thu, 28 Jul 2011 08:49:08 -0400
Source: samba
Binary: samba samba-common-bin samba-common samba-tools smbclient swat samba-doc samba-doc-pdf libpam-smbpass libsmbclient libsmbclient-dev winbind samba-dbg libwbclient0
Architecture: source
Version: 2:3.5.4~dfsg-1ubuntu8.5
Distribution: maverick-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libpam-smbpass - pluggable authentication module for Samba
 libsmbclient - shared library for communication with SMB/CIFS servers
 libsmbclient-dev - development files for libsmbclient
 libwbclient0 - Samba winbind client library
 samba      - SMB/CIFS file, print, and login server for Unix
 samba-common - common files used by both the Samba server and client
 samba-common-bin - common files used by both the Samba server and client
 samba-dbg  - Samba debugging symbols
 samba-doc  - Samba documentation
 samba-doc-pdf - Samba documentation in PDF format
 samba-tools - Samba testing utilities
 smbclient  - command-line SMB/CIFS clients for Unix
 swat       - Samba Web Administration Tool
 winbind    - Samba nameservice integration server
Changes: 
 samba (2:3.5.4~dfsg-1ubuntu8.5) maverick-security; urgency=low
 .
   * SECURITY UPDATE: cross-site scripting in SWAT
     - debian/patches/CVE-2011-2694.patch: don't display username in
       source3/web/swat.c.
     - CVE-2011-2694
   * SECURITY UPDATE: cross-site request forgery in SWAT
     - debian/patches/CVE-2011-2522.patch: implement nonce in
       source3/web/{cgi.c,statuspage.c,swat.c,swat_proto.h}.
     - CVE-2011-2522
Checksums-Sha1: 
 843783bad696f7ca5e1d4771f731c352c51f1330 2902 samba_3.5.4~dfsg-1ubuntu8.5.dsc
 6356b23c40b326d05f3912ee7f4be5e9b0096879 523545 samba_3.5.4~dfsg-1ubuntu8.5.debian.tar.gz
Checksums-Sha256: 
 eaa2d2e2cb87f9bb2e0ee15b05929543584846dbff83876104301be8a57707ed 2902 samba_3.5.4~dfsg-1ubuntu8.5.dsc
 ccf73c1e16262b887861f153e526800efa5df9501080bf2c4769a9990112f0a5 523545 samba_3.5.4~dfsg-1ubuntu8.5.debian.tar.gz
Files: 
 faf37fccf34726bd15337923d36b92b2 2902 net optional samba_3.5.4~dfsg-1ubuntu8.5.dsc
 3997d1e3da5ba4b6205432d61b195471 523545 net optional samba_3.5.4~dfsg-1ubuntu8.5.debian.tar.gz
Original-Maintainer: Debian Samba Maintainers <pkg-samba-maint at lists.alioth.debian.org>