Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Networks :: tb11000.htm

Samba regression



Samba regression
Samba regression




--A7FgPGrDEcSmmdo/
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

=========================================================== 
Ubuntu Security Notice USN-460-2               May 22, 2007
samba regression
http://bugs.debian.org/424629 
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 7.04

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 7.04:
  samba                                    3.0.24-2ubuntu1.2

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

USN-460-1 fixed several vulnerabilities in Samba.  The upstream changes 
for CVE-2007-2444 had an unexpected side-effect in Feisty.  Shares 
configured with the "force group" option no longer behaved correctly.  
This update corrects the problem.  We apologize for the inconvenience.

Original advisory details:

 Paul Griffith and Andrew Hogue discovered that Samba did not fully drop 
 root privileges while translating SIDs. A remote authenticated user 
 could issue SMB operations during a small window of opportunity and gain 
 root privileges.  (CVE-2007-2444)


Updated packages for Ubuntu 7.04:

  Source archives:

http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2.diff.gz 
      Size/MD5:   212153 6da96c74db7d1c09e641a152f8ee45e1
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2.dsc 
      Size/MD5:     1491 1a52756b8bbb47f02c26fde99a9bb4ce
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24.orig.tar.gz 
      Size/MD5: 17708128 89273f67a6d8067cbbecefaa13747153

  Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-doc-pdf_3.0.24-2ubuntu1.2_all.deb 
      Size/MD5:  6602776 f1ed1988f3c100b7fcee8cf79382111f
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-doc_3.0.24-2ubuntu1.2_all.deb 
      Size/MD5:  6917070 34730228bbe70c548b9cc79076f5a90d

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0.24-2ubuntu1.2_amd64.deb 
      Size/MD5:   481854 ee8f1b1fbb9ddfcf17159ef2a13cd4d6
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3.0.24-2ubuntu1.2_amd64.deb 
      Size/MD5:   116060 ef8a65e691ac3bc3cdc217d251d98c06
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.24-2ubuntu1.2_amd64.deb 
      Size/MD5:   868206 9ce9c5d75e3f5892bc942f9e791afbff
http://security.ubuntu.com/ubuntu/pool/main/s/samba/python-samba_3.0.24-2ubuntu1.2_amd64.deb 
      Size/MD5:  6498044 a0daa795e35041c14e02ca111f853cb4
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.24-2ubuntu1.2_amd64.deb 
      Size/MD5:  2691028 4895ca74acde997d07cdf39548f4d805
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.24-2ubuntu1.2_amd64.deb 
      Size/MD5: 12259246 d5c64e437db85e4f5bfb4b02f0169c22
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2_amd64.deb 
      Size/MD5:  3757146 15dff197838e3bbee6baf66044614fc4
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.24-2ubuntu1.2_amd64.deb 
      Size/MD5:  4515276 997576caa9efe64f1e7133b63c2209fd
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.24-2ubuntu1.2_amd64.deb 
      Size/MD5:   479278 efb4d101652daeb2c0694e4789242d52
http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.24-2ubuntu1.2_amd64.deb 
      Size/MD5:   903766 be129c5939f7587c589e0e8bd19c0d2f
http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.24-2ubuntu1.2_amd64.deb 
      Size/MD5:  2164682 9a72462741f78fcecb5231ebbc4fa728

  i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0.24-2ubuntu1.2_i386.deb 
      Size/MD5:   435404 61bed726d70a5da7b415287b65ea879e
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3.0.24-2ubuntu1.2_i386.deb 
      Size/MD5:   116068 b1b17947b46671789d3e65f444aa85ff
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.24-2ubuntu1.2_i386.deb 
      Size/MD5:   793818 042c7cd1cb0d6be9c6b2b041c0462107
http://security.ubuntu.com/ubuntu/pool/main/s/samba/python-samba_3.0.24-2ubuntu1.2_i386.deb 
      Size/MD5:  5907188 069670d6e0d21aae088efbad12e60974
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.24-2ubuntu1.2_i386.deb 
      Size/MD5:  2437476 fe052cc018a5c926b4ece39f7fe60904
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.24-2ubuntu1.2_i386.deb 
      Size/MD5: 11858394 c452ee109a0b3d939eae2936e21880e0
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2_i386.deb 
      Size/MD5:  3341020 3ce55f95e53074e863f3cae5ced65516
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.24-2ubuntu1.2_i386.deb 
      Size/MD5:  4015590 e75fbb06c321388db89d606e4683c88f
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.24-2ubuntu1.2_i386.deb 
      Size/MD5:   426918 1d88ff8f4cd252ebf84a91832ae69923
http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.24-2ubuntu1.2_i386.deb 
      Size/MD5:   819738 fbd463381a1086b97507501587b15d06
http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.24-2ubuntu1.2_i386.deb 
      Size/MD5:  1924906 76636feed1ebc02974a81c8d792eaccc

  powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0.24-2ubuntu1.2_powerpc.deb 
      Size/MD5:   477712 077c3c5fb3684e84de52c0679bf95ba8
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3.0.24-2ubuntu1.2_powerpc.deb 
      Size/MD5:   116064 285cbcff21f77ec169ba95b3fd8f04b1
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.24-2ubuntu1.2_powerpc.deb 
      Size/MD5:   859006 328330da8f556219f969782b73a05d55
http://security.ubuntu.com/ubuntu/pool/main/s/samba/python-samba_3.0.24-2ubuntu1.2_powerpc.deb 
      Size/MD5:  6536378 e92bcf3417bb11e10ff10c27225b3415
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.24-2ubuntu1.2_powerpc.deb 
      Size/MD5:  2652786 1948f2f71806f948d10e6d852f67b81d
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.24-2ubuntu1.2_powerpc.deb 
      Size/MD5: 12571552 c79e1aeef927ef75004f8dea6e2809e4
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2_powerpc.deb 
      Size/MD5:  3726154 7d7f5bf3d8143f5ffa4e9e2a63806542
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.24-2ubuntu1.2_powerpc.deb 
      Size/MD5:  4453980 a791426c9b3b4ac3007ef44e1c73e699
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.24-2ubuntu1.2_powerpc.deb 
      Size/MD5:   486838 59669eb741b45c186fe16526119d782a
http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.24-2ubuntu1.2_powerpc.deb 
      Size/MD5:   893204 8c05c4a8b66a722701e2d78187d49477
http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.24-2ubuntu1.2_powerpc.deb 
      Size/MD5:  2144258 83908708c55d4181859e0feb148dde67

  sparc architecture (Sun SPARC/UltraSPARC)

http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0.24-2ubuntu1.2_sparc.deb 
      Size/MD5:   441942 c1c155969d490f566aa0f413a343a9e1
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3.0.24-2ubuntu1.2_sparc.deb 
      Size/MD5:   116060 141c0d479be2682e20297979ccbc90e8
http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.24-2ubuntu1.2_sparc.deb 
      Size/MD5:   796330 ecb5923067b06e44646d5bf5f2747803
http://security.ubuntu.com/ubuntu/pool/main/s/samba/python-samba_3.0.24-2ubuntu1.2_sparc.deb 
      Size/MD5:  5932424 9d4c506b28f34b816adb6bc0237a37b4
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.24-2ubuntu1.2_sparc.deb 
      Size/MD5:  2407996 06f0808891b90ae328e83cc8fceb7c30
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.24-2ubuntu1.2_sparc.deb 
      Size/MD5: 10878116 47d21febc3f0d1a414e1ef4564fab09e
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.24-2ubuntu1.2_sparc.deb 
      Size/MD5:  3344900 258dda921d636448de7fedab29003261
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.24-2ubuntu1.2_sparc.deb 
      Size/MD5:  3962018 fdf2ccbff62ed1dde783c4bf8c127230
http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.24-2ubuntu1.2_sparc.deb 
      Size/MD5:   435762 da146cdf227e40924842168b0b0688d3
http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.24-2ubuntu1.2_sparc.deb 
      Size/MD5:   804986 f042b6a7afeec6c4ca1f1bc85fdb45cb
http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.24-2ubuntu1.2_sparc.deb 
      Size/MD5:  1922850 f093eef0428fb16f2d7c1bc3f43c5cb2


--A7FgPGrDEcSmmdo/
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGU1jaH/9LqRcGPm0RAp+EAJ9CYkZFZvNtl1uyrKebNACAhx8umQCgj/2/
nflNhfHI8z7XqL27D4Yl7eQ=/QeN
-----END PGP SIGNATURE-----

--A7FgPGrDEcSmmdo/--


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH