[ubuntu/vivid-proposed] samba 2:4.1.13+dfsg-4ubuntu2 (Accepted)

[Marc Deslauriers]

samba (2:4.1.13+dfsg-4ubuntu2) vivid; urgency=medium

  * SECURITY UPDATE: code execution vulnerability in smbd daemon
    - debian/patches/CVE-2015-0240.patch: don't call talloc_free on an
      uninitialized pointer and don't dereference a NULL pointer in
      source3/rpc_server/netlogon/srv_netlog_nt.c.
    - CVE-2015-0240

Date: Mon, 23 Feb 2015 08:36:51 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/samba/2:4.1.13+dfsg-4ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 23 Feb 2015 08:36:51 -0500
Source: samba
Binary: samba samba-libs samba-common samba-common-bin smbclient samba-testsuite registry-tools libparse-pidl-perl samba-dev samba-doc python-samba samba-dsdb-modules samba-vfs-modules libpam-smbpass libsmbclient libsmbclient-dev libsmbsharemodes0 libsmbsharemodes-dev winbind libpam-winbind libnss-winbind samba-dbg libwbclient0 libwbclient-dev
Architecture: source
Version: 2:4.1.13+dfsg-4ubuntu2
Distribution: vivid
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 libnss-winbind - Samba nameservice integration plugins
 libpam-smbpass - pluggable authentication module for Samba
 libpam-winbind - Windows domain authentication integration plugin
 libparse-pidl-perl - IDL compiler written in Perl
 libsmbclient - shared library for communication with SMB/CIFS servers
 libsmbclient-dev - development files for libsmbclient
 libsmbsharemodes-dev - development files for libsmbsharemodes
 libsmbsharemodes0 - shared library for non-samba access to the samba 'share modes' da
 libwbclient-dev - Samba winbind client library - development files
 libwbclient0 - Samba winbind client library
 python-samba - Python bindings for Samba
 registry-tools - tools for viewing and manipulating the Windows registry
 samba      - SMB/CIFS file, print, and login server for Unix
 samba-common - common files used by both the Samba server and client
 samba-common-bin - Samba common files used by both the server and the client
 samba-dbg  - Samba debugging symbols
 samba-dev  - tools for extending Samba
 samba-doc  - Samba documentation
 samba-dsdb-modules - Samba Directory Services Database
 samba-libs - Samba core libraries
 samba-testsuite - test suite from Samba
 samba-vfs-modules - Samba Virtual FileSystem plugins
 smbclient  - command-line SMB/CIFS clients for Unix
 winbind    - service to resolve user and group information from Windows NT ser
Changes:
 samba (2:4.1.13+dfsg-4ubuntu2) vivid; urgency=medium
 .
   * SECURITY UPDATE: code execution vulnerability in smbd daemon
     - debian/patches/CVE-2015-0240.patch: don't call talloc_free on an
       uninitialized pointer and don't dereference a NULL pointer in
       source3/rpc_server/netlogon/srv_netlog_nt.c.
     - CVE-2015-0240
Checksums-Sha1:
 e727dfbdcd4d0cc9cb1078c83b3cf810a35b4c9b 4270 samba_4.1.13+dfsg-4ubuntu2.dsc
 a991bff98885e039b8834d5b2542754349a82d8b 221608 samba_4.1.13+dfsg-4ubuntu2.debian.tar.xz
Checksums-Sha256:
 8ce5788f50452d22ef8ac737ae4fa52aa5c093534f1f5c62166c742fd2def792 4270 samba_4.1.13+dfsg-4ubuntu2.dsc
 d55b0d3ae81dbe8fb19f1531d4f30ea2279d8d9444c5e8200838f20dca1d06c5 221608 samba_4.1.13+dfsg-4ubuntu2.debian.tar.xz
Files:
 b52c9c01552e6a1e3829c1df1d7bacbe 4270 net optional samba_4.1.13+dfsg-4ubuntu2.dsc
 6ef7480cfa19dbb131a92e0e40dee10b 221608 net optional samba_4.1.13+dfsg-4ubuntu2.debian.tar.xz
Original-Maintainer: Debian Samba Maintainers <pkg-samba-maint at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=AwzC
-----END PGP SIGNATURE-----