[bluewhite64-security] samba (BW64SA:20090106-01)
Hash: SHA1
[bluewhite64-security] samba (BW64SA:20090106-01)
New samba packages are available for Bluewhite64 12.2 and -current to fix a
security issue.
More details about this issue may be found in the Common
Vulnerabilities and Exposures (CVE) database:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0022
Here are the details from the Bluewhite64 12.2 ChangeLog:
+--------------------------+
PATCHES/packages/samba-3.2.7-x86_64-1.tgz: Upgraded to samba-3.2.7.
This fixes a security issue. From the WHATSNEW.txt file:
"This is a security release in order to address CVE-2009-0022.
CVE-2009-0022
In Samba 3.2.0 to 3.2.6, in setups with registry shares enabled,
access to the root filesystem ("/") is granted
when connecting to a share called "" (empty string)
using old versions of smbclient (before 3.0.28).
The original security announcement for this and past advisories can
be found http://www.samba.org/samba/security/"
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0022
[*** Security fix ***]
+--------------------------+
Where to find the new packages:
+-----------------------------+
See the "Get Bluewhite64" section on http://www.bluewhite64.com for additional
mirror sites near you.
Updated package for Bluewhite64 12.2:
http://data.bluewhite64.com/bluewhite64-12.2/patches/packages/samba-3.2.7-x86_64-1.tgz
Updated package for Bluewhite64 -current:
http://data.bluewhite64.com/bluewhite64-current/bluewhite64/n/samba-3.2.7-x86_64-1.tgz
MD5 signatures:
+-------------+
Bluewhite64 12.2 package:
11b698aeb7edbed544b77274f643d481 samba-3.2.7-x86_64-1.tgz
Bluewhite64 -current package:
11b698aeb7edbed544b77274f643d481 samba-3.2.7-x86_64-1.tgz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg samba-3.2.7-x86_64-1.tgz
Then, restart the Samba server if the machine uses it:
# /etc/rc.d/rc.samba restart
+-----+
Bluewhite64 Linux Security Team
http://bluewhite64.com/gpg-key
security©bluewhite64.com
+-------------------------------------------------------+
| To leave the bluewhite64-security mailing list:
+-------------------------------------------------------+
| Send a blank email to
|
| bluewhite64-security-unsubscribe©bluewhite64.com
|
| You will get a confirmation message back containing
| instructions to complete the process.
|
| Please do not reply to this email address.
+-------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkljuDIACgkQpTOsxuDdlY5xUQCdE+rTLn12+DwpEJIr2GxEnDSO
4xEAn3ZCqakeciw3S7557lH4eHKBzOyL
=PKcc
-----END PGP SIGNATURE-----