summaryrefslogtreecommitdiff
path: root/misc/gok
diff options
context:
space:
mode:
authortaca <taca>2009-10-04 16:58:38 +0000
committertaca <taca>2009-10-04 16:58:38 +0000
commitd514c4bbfaef3ccc9ef7c843152d0667640ec7e2 (patch)
tree986afaa99b144acd19b3850ede9f4f310e381a57 /misc/gok
parent2e03f95ddaed441b874bbd42970fafd35ec54e10 (diff)
downloadpkgsrc-d514c4bbfaef3ccc9ef7c843152d0667640ec7e2.tar.gz
Update samba package to 3.0.37.
This is a security release in order to address CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906. Please note that Samba 3.0 is not maintained any longer. This security release is shipped on a voluntary basis. o CVE-2009-2813: In all versions of Samba later than 3.0.11, connecting to the home share of a user will use the root of the filesystem as the home directory if this user is misconfigured to have an empty home directory in /etc/passwd. o CVE-2009-2948: If mount.cifs is installed as a setuid program, a user can pass it a credential or password path to which he or she does not have access and then use the --verbose option to view the first line of that file. o CVE-2009-2906: Specially crafted SMB requests on authenticated SMB connections can send smbd into a 100% CPU loop, causing a DoS on the Samba server.
Diffstat (limited to 'misc/gok')
0 files changed, 0 insertions, 0 deletions