[ubuntu/natty-security] samba_3.5.8~dfsg-1ubuntu2.3_amd64_translations.tar.gz, samba_3.5.8~dfsg-1ubuntu2.3_powerpc_translations.tar.gz, samba, samba_3.5.8~dfsg-1ubuntu2.3_armel_translations.tar.gz, samba_3.5.8~dfsg-1ubuntu2.3_i386_translations.tar.gz 2:3.5.8~dfsg-1ubuntu2.3 (Accepted)

[Marc Deslauriers]

samba (2:3.5.8~dfsg-1ubuntu2.3) natty-security; urgency=low

  * SECURITY UPDATE: cross-site scripting in SWAT
    - debian/patches/CVE-2011-2694.patch: don't display username in
      source3/web/swat.c.
    - CVE-2011-2694
  * SECURITY UPDATE: cross-site request forgery in SWAT
    - debian/patches/CVE-2011-2522.patch: implement nonce in
      source3/web/{cgi.c,statuspage.c,swat.c,swat_proto.h}.
    - CVE-2011-2522

Date: Thu, 28 Jul 2011 08:42:20 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/natty/+source/samba/2:3.5.8~dfsg-1ubuntu2.3
-------------- next part --------------
Format: 1.8
Date: Thu, 28 Jul 2011 08:42:20 -0400
Source: samba
Binary: samba samba-common-bin samba-common samba-tools smbclient swat samba-doc samba-doc-pdf libpam-smbpass libsmbclient libsmbclient-dev winbind samba-dbg libwbclient0
Architecture: source
Version: 2:3.5.8~dfsg-1ubuntu2.3
Distribution: natty-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libpam-smbpass - pluggable authentication module for Samba
 libsmbclient - shared library for communication with SMB/CIFS servers
 libsmbclient-dev - development files for libsmbclient
 libwbclient0 - Samba winbind client library
 samba      - SMB/CIFS file, print, and login server for Unix
 samba-common - common files used by both the Samba server and client
 samba-common-bin - common files used by both the Samba server and client
 samba-dbg  - Samba debugging symbols
 samba-doc  - Samba documentation
 samba-doc-pdf - Samba documentation in PDF format
 samba-tools - Samba testing utilities
 smbclient  - command-line SMB/CIFS clients for Unix
 swat       - Samba Web Administration Tool
 winbind    - Samba nameservice integration server
Changes: 
 samba (2:3.5.8~dfsg-1ubuntu2.3) natty-security; urgency=low
 .
   * SECURITY UPDATE: cross-site scripting in SWAT
     - debian/patches/CVE-2011-2694.patch: don't display username in
       source3/web/swat.c.
     - CVE-2011-2694
   * SECURITY UPDATE: cross-site request forgery in SWAT
     - debian/patches/CVE-2011-2522.patch: implement nonce in
       source3/web/{cgi.c,statuspage.c,swat.c,swat_proto.h}.
     - CVE-2011-2522
Checksums-Sha1: 
 5819620039ae828c3cee9a8bca9cee732078f8c3 2550 samba_3.5.8~dfsg-1ubuntu2.3.dsc
 7501e50bfbdc51662e0b5833c82880592bd0a30c 621414 samba_3.5.8~dfsg-1ubuntu2.3.debian.tar.gz
Checksums-Sha256: 
 1e2d03fe0c67b0172a6db51989ba61bf042a99bc6598f43bc55c1394008354e1 2550 samba_3.5.8~dfsg-1ubuntu2.3.dsc
 438fe0d904ace962226faaf8ea159367223c95a0dd563da3c76a1c0132aff5e1 621414 samba_3.5.8~dfsg-1ubuntu2.3.debian.tar.gz
Files: 
 fb2ca64555ee7f6e72f235d7025d1c75 2550 net optional samba_3.5.8~dfsg-1ubuntu2.3.dsc
 5a12f3a5d60e7119315f3d4ef4568b70 621414 net optional samba_3.5.8~dfsg-1ubuntu2.3.debian.tar.gz
Original-Maintainer: Debian Samba Maintainers <pkg-samba-maint at lists.alioth.debian.org>