Permalink
Browse files

Update to Samba 3.6.4

This is a security release in order to address
CVE-2012-1182 ("root" credential remote code execution).

o  CVE-2012-1182:
   Samba 3.0.x to 3.6.3 are affected by a
   vulnerability that allows remote code
   execution as the "root" user.

Changes since 3.6.3:
--------------------

o   Stefan Metzmacher <metze@samba.org>
    *BUG 8815: PIDL based autogenerated code allows overwriting beyond of
     allocated array (CVE-2012-1182).
  • Loading branch information...
1 parent 6f056d3 commit 684bae6e3aedb2033267397d41e16a507996353b asau committed Apr 11, 2012
Showing with 6 additions and 7 deletions.
  1. +2 −3 net/samba/Makefile
  2. +4 −4 net/samba/distinfo
View
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.217 2012/02/06 12:41:17 wiz Exp $
+# $NetBSD: Makefile,v 1.218 2012/04/11 09:30:08 asau Exp $
.include "../../net/samba/Makefile.mirrors"
DISTNAME= samba-${VERSION}
-PKGREVISION= 7
CATEGORIES= net
MASTER_SITES= ${SAMBA_MIRRORS:=stable/}
@@ -12,7 +11,7 @@ HOMEPAGE= http://www.samba.org/
COMMENT= SMB/CIFS protocol server suite
LICENSE= gnu-gpl-v3
-VERSION= 3.6.3
+VERSION= 3.6.4
CONFLICTS+= ja-samba-[0-9]* pam-smbpass-[0-9]* tdb-[0-9]* winbind-[0-9]*
PKG_DESTDIR_SUPPORT= user-destdir
View
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.83 2012/01/30 23:07:06 tron Exp $
+$NetBSD: distinfo,v 1.84 2012/04/11 09:30:08 asau Exp $
-SHA1 (samba-3.6.3.tar.gz) = 430a1e13fe20c17e2808035c863eb5e77685c89b
-RMD160 (samba-3.6.3.tar.gz) = fd04fd5897f0f34f257c504de911e1ab34ff3e25
-Size (samba-3.6.3.tar.gz) = 28993737 bytes
+SHA1 (samba-3.6.4.tar.gz) = 6492ed2246d62bdd79389b0e7dc8cffbc4d41fda
+RMD160 (samba-3.6.4.tar.gz) = a97e5d513ffc72b0d76e17c769f6b99a804adee0
+Size (samba-3.6.4.tar.gz) = 29007087 bytes
SHA1 (patch-aa) = 6c8497adce78e8b1dea2a0402d4a980b67b57b8e
SHA1 (patch-ab) = 0372ff2e3caca866dacd6ed25ae1d02e34a5b567
SHA1 (patch-ac) = 5b1c0fdb781cb75f81af71ed2695144d4a35e032

0 comments on commit 684bae6

Please sign in to comment.