diff options
| author | taca <taca> | 2009-10-04 16:58:38 +0000 |
|---|---|---|
| committer | taca <taca> | 2009-10-04 16:58:38 +0000 |
| commit | d514c4bbfaef3ccc9ef7c843152d0667640ec7e2 (patch) | |
| tree | 986afaa99b144acd19b3850ede9f4f310e381a57 /net/samba/patches/patch-aa | |
| parent | 2e03f95ddaed441b874bbd42970fafd35ec54e10 (diff) | |
| download | pkgsrc-d514c4bbfaef3ccc9ef7c843152d0667640ec7e2.tar.gz | |
Update samba package to 3.0.37.
This is a security release in order to address CVE-2009-2813, CVE-2009-2948
and CVE-2009-2906.
Please note that Samba 3.0 is not maintained any longer. This security
release is shipped on a voluntary basis.
o CVE-2009-2813:
In all versions of Samba later than 3.0.11, connecting to the home
share of a user will use the root of the filesystem
as the home directory if this user is misconfigured to have
an empty home directory in /etc/passwd.
o CVE-2009-2948:
If mount.cifs is installed as a setuid program, a user can pass it a
credential or password path to which he or she does not have access and
then use the --verbose option to view the first line of that file.
o CVE-2009-2906:
Specially crafted SMB requests on authenticated SMB connections can
send smbd into a 100% CPU loop, causing a DoS on the Samba server.
Diffstat (limited to 'net/samba/patches/patch-aa')
| -rw-r--r-- | net/samba/patches/patch-aa | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/net/samba/patches/patch-aa b/net/samba/patches/patch-aa index ee655612925..fa7f1e8e9f2 100644 --- a/net/samba/patches/patch-aa +++ b/net/samba/patches/patch-aa @@ -1,8 +1,8 @@ -$NetBSD: patch-aa,v 1.32 2008/04/03 20:19:42 jlam Exp $ +$NetBSD: patch-aa,v 1.33 2009/10/04 16:58:38 taca Exp $ ---- nsswitch/pam_winbind.c.orig 2008-03-08 10:56:27.000000000 -0500 +--- nsswitch/pam_winbind.c.orig 2009-09-30 21:21:56.000000000 +0900 +++ nsswitch/pam_winbind.c -@@ -1291,6 +1291,8 @@ static char *_pam_delete(register char * +@@ -1295,6 +1295,8 @@ static char *_pam_delete(register char * return NULL; } |