Skip to content

Commit

Permalink
Pullup rev 1.6 (requested by bouyer in ticket #1220)
Browse files Browse the repository at this point in the history
        Updated samba to 2.2.8

        ****************************************
        * IMPORTANT: Security bugfix for Samba *
        ****************************************

        The SuSE security audit team, in particular Sebastian Krahmer
        <krahmer@suse.de>, has found a flaw in the Samba main smbd code which
        could allow an external attacker to remotely and anonymously gain
        Super User (root) privileges on a server running a Samba server.

        This flaw exists in previous versions of Samba from 2.0.x to 2.2.7a
        inclusive.  This is a serious problem and all sites should either
        upgrade to Samba 2.2.8 immediately or prohibit access to TCP ports 139
        and 445. Advice created by Andrew Tridgell, the leader of the Samba
        Team, on how to protect an unpatched Samba server is given at the end
        of this section.

        The SMB/CIFS protocol implemented by Samba is vulnerable to many
        attacks, even without specific security holes.  The TCP ports 139 and
        the new port 445 (used by Win2k and the Samba 3.0 alpha code in
        particular) should never be exposed to untrusted networks.
  • Loading branch information
jmc committed Mar 23, 2003
1 parent ff1a5fd commit cbd9132
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions net/samba/Makefile.common
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# $NetBSD: Makefile.common,v 1.5 2002/12/13 08:37:08 martti Exp $
# $NetBSD: Makefile.common,v 1.5.2.1 2003/03/23 01:23:07 jmc Exp $

DISTNAME= samba-${SAMBA_DIST_VERS}
SAMBA_DIST_VERS= 2.2.7a
SAMBA_DIST_VERS= 2.2.8
WRKSRC?= ${WRKDIR}/${DISTNAME}/source
CATEGORIES?= net
MASTER_SITES= ftp://ftp.samba.org/pub/samba/ \
Expand Down

0 comments on commit cbd9132

Please sign in to comment.