[Pkg-samba-maint] Bug#516160: Bug#516160: Samba 3.3.0-2 breaks delete/rename of writeable files

[Christian Perrier]

Quoting sacrificial-spam-address at horizon.com (sacrificial-spam-address at horizon.com):
> > What security fixes?
> >
> > Upstream didn't publish any security advisory sicne 3.2.5
> 
> http://news.samba.org/releases/3.2.7/:
> > 5 January 2009
> > Samba 3.2.7 Available for Download
> > 
> > This is a security release to address CVE-2009-0022. The original advisory
> > is available online. A patch for Samba 3.2.6 is available. This security
> > advisory is applicable to releases from Samba 3.2.0 to 3.2.6. Past
> > security advisories are available on our security page.
> 
> It's also mentioned on http://samba.org/samba/history/security.html

You mean this (from lenny's samba changelog)?


samba (2:3.2.5-3) unstable; urgency=high

  * Security update
  * Fix Potential access to "/" in setups with registry shares enabled
    This fixes CVE-2009-0022, backported from 3.2.7

I indeed should have written "Upstream didn't publish any security
advisory sicne 3.2.5 *that we haven't addressed*"...sorry for the
imprecision.





-- 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20090220/a51676cf/attachment.pgp