[Pkg-samba-maint] Bug#452542: samba: Shares cannot be mounted with smbfs

[Steve Langasek]

forcemerge 451839 452542
found 451839 3.0.24-6etch5
thanks

On Fri, Nov 23, 2007 at 12:10:40PM -0300, Sebastian Cruz wrote:
> I recently upgraded samba from 3.0.24-6etch4 to 3.0.24-6etch5 because of
> a security upgrade. That rendered some shares that I use mounted with
> smbmount (provided in smbfs package) unusable. The shares got mounted
> but they cannot be browsed within Gnome neither the console. Although
> the shares can be browsed using Gnome helper (smb://). 

Yes, I'm afraid this was a known regression in the security fix for
CVE-2007-4572 which should have been (but wasn't) documented as part of the
DSA mail.  Fixed packages for sarge and etch are just waiting for binary
packages to be available on all architectures.  If your file server is not
also being used as a WINS server, I recommend that you downgrade to
3.0.24-6etch4.  If your file server *is* being used as a WINS server, then
you have CVE-2007-5398 to contend with, which is a remote root exploit, so I
would /not/ recommend downgrading.  Instead, your best option is to instead
migrate from the deprecated smbfs client to cifs, or to weather the problem
until the updated packages become available from security.debian.org within
a few days.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
vorlon at debian.org                                   http://www.debian.org/