[ MDVSA-2009:042 ] samba
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2009:042
http://www.mandriva.com/security/
_______________________________________________________________________
Package : samba
Date : February 18, 2009
Affected: 2009.0
_______________________________________________________________________
Problem Description:
Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows
remote authenticated users to access the root filesystem via a crafted
connection request that specifies a blank share name (CVE-2009-0022).
This update provides samba 3.2.7 to address this issue.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0022
_______________________________________________________________________
Updated Packages:
Mandriva Linux 2009.0:
f9672d52051da5b814933c2f764cf665
2009.0/i586/libnetapi0-3.2.7-0.1mdv2009.0.i586.rpm
8395587171c03b986d6c6debe32d421d
2009.0/i586/libnetapi-devel-3.2.7-0.1mdv2009.0.i586.rpm
419e8930d9a83af98db87db40b532159
2009.0/i586/libsmbclient0-3.2.7-0.1mdv2009.0.i586.rpm
79a9ddeaad8356546d77f40e5f8823b6
2009.0/i586/libsmbclient0-devel-3.2.7-0.1mdv2009.0.i586.rpm
674ed223557b5c9bf137782cf7a24d89
2009.0/i586/libsmbclient0-static-devel-3.2.7-0.1mdv2009.0.i586.rpm
fca38c8651f2dfc79314d4184f9bbfa0
2009.0/i586/libsmbsharemodes0-3.2.7-0.1mdv2009.0.i586.rpm
a863211596f28dc756d79896f4e9e161
2009.0/i586/libsmbsharemodes-devel-3.2.7-0.1mdv2009.0.i586.rpm
f307514ed1e44e777cc852f0314b6159
2009.0/i586/libtalloc1-3.2.7-0.1mdv2009.0.i586.rpm
642ff276c29471425bff0536aeb9bfdf
2009.0/i586/libtalloc-devel-3.2.7-0.1mdv2009.0.i586.rpm
915958f5aefa05cbcf7e9932351aaec5
2009.0/i586/libtdb1-3.2.7-0.1mdv2009.0.i586.rpm
5b0826d63a36305f2eb55cd73bce0fb0
2009.0/i586/libtdb-devel-3.2.7-0.1mdv2009.0.i586.rpm
630fdfaf7ed4bb735f904c655fd7229a
2009.0/i586/libwbclient0-3.2.7-0.1mdv2009.0.i586.rpm
625d0733d9862bee6491695001b3f495
2009.0/i586/libwbclient-devel-3.2.7-0.1mdv2009.0.i586.rpm
24b1dedd7adc4a4b8f41f4049c521190
2009.0/i586/mount-cifs-3.2.7-0.1mdv2009.0.i586.rpm
786b41af61e1231261d8a691e051e6e8
2009.0/i586/nss_wins-3.2.7-0.1mdv2009.0.i586.rpm
3e7c63f3a2252d8222054a77fe51eb0b
2009.0/i586/samba-client-3.2.7-0.1mdv2009.0.i586.rpm
0243aebbb4d47aa1fab3e8498f2bc0ed
2009.0/i586/samba-common-3.2.7-0.1mdv2009.0.i586.rpm
5fb67d67607d4e70c2395917f57143a7
2009.0/i586/samba-doc-3.2.7-0.1mdv2009.0.i586.rpm
d7231c511a3a3e99d9c611a1942e112d
2009.0/i586/samba-server-3.2.7-0.1mdv2009.0.i586.rpm
196ed3589e5cbb63de16098ee947ce78
2009.0/i586/samba-swat-3.2.7-0.1mdv2009.0.i586.rpm
bef4656a6f1d3e1e303a82ce5a5736e8
2009.0/i586/samba-winbind-3.2.7-0.1mdv2009.0.i586.rpm
20b63670ed98d96b046929b19d03b17a 2009.0/SRPMS/samba-3.2.7-0.1mdv2009.0.src.rpm
Mandriva Linux 2009.0/X86_64:
8543b1c900940717ce87593bcd894ddd
2009.0/x86_64/lib64netapi0-3.2.7-0.1mdv2009.0.x86_64.rpm
f8a4585909a44f037d90f3f40f5408a7
2009.0/x86_64/lib64netapi-devel-3.2.7-0.1mdv2009.0.x86_64.rpm
5e8baaab26d9b709d4b04f7bde88e9a8
2009.0/x86_64/lib64smbclient0-3.2.7-0.1mdv2009.0.x86_64.rpm
797b7746caa92c8ea28a3e1fa218659a
2009.0/x86_64/lib64smbclient0-devel-3.2.7-0.1mdv2009.0.x86_64.rpm
b1ec784b83915df65a7f1d6c06ce46c3
2009.0/x86_64/lib64smbclient0-static-devel-3.2.7-0.1mdv2009.0.x86_64.rpm
b4cbff234e2ce3098b79887097ec1f98
2009.0/x86_64/lib64smbsharemodes0-3.2.7-0.1mdv2009.0.x86_64.rpm
26cd1508a8d960e01b1476d64e9a073c
2009.0/x86_64/lib64smbsharemodes-devel-3.2.7-0.1mdv2009.0.x86_64.rpm
c4ce64515ad474fcfc4a33ba78e8bc25
2009.0/x86_64/lib64talloc1-3.2.7-0.1mdv2009.0.x86_64.rpm
eff77f2eeff1b0f715da1cd6b9885122
2009.0/x86_64/lib64talloc-devel-3.2.7-0.1mdv2009.0.x86_64.rpm
85c16b38fa72a572ff1c09d1de454fb4
2009.0/x86_64/lib64tdb1-3.2.7-0.1mdv2009.0.x86_64.rpm
937d1d412b06fe68e8bd6175c5dbb967
2009.0/x86_64/lib64tdb-devel-3.2.7-0.1mdv2009.0.x86_64.rpm
85fd89501e053f3cd34ec78fbe140803
2009.0/x86_64/lib64wbclient0-3.2.7-0.1mdv2009.0.x86_64.rpm
9d2f55f2a15164e6188b967f99632572
2009.0/x86_64/lib64wbclient-devel-3.2.7-0.1mdv2009.0.x86_64.rpm
f90927126796e521d371749467dc115d
2009.0/x86_64/mount-cifs-3.2.7-0.1mdv2009.0.x86_64.rpm
e51ea5546011dee07fc7f1d1dbbdf04f
2009.0/x86_64/nss_wins-3.2.7-0.1mdv2009.0.x86_64.rpm
40f9be5aafb9a4e7562479fc54414825
2009.0/x86_64/samba-client-3.2.7-0.1mdv2009.0.x86_64.rpm
22a9db213304d56ba1837a9686694478
2009.0/x86_64/samba-common-3.2.7-0.1mdv2009.0.x86_64.rpm
d24f54f23ddf196170c2fe8e149e853f
2009.0/x86_64/samba-doc-3.2.7-0.1mdv2009.0.x86_64.rpm
b3e8420a896d9defaebc749abceb5eb2
2009.0/x86_64/samba-server-3.2.7-0.1mdv2009.0.x86_64.rpm
138562ffad186da5c639241c4d7971e5
2009.0/x86_64/samba-swat-3.2.7-0.1mdv2009.0.x86_64.rpm
cff49e288971a75d4e2b5c812ed36a53
2009.0/x86_64/samba-winbind-3.2.7-0.1mdv2009.0.x86_64.rpm
20b63670ed98d96b046929b19d03b17a 2009.0/SRPMS/samba-3.2.7-0.1mdv2009.0.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFJnDspmqjQ0CJFipgRAoziAJ95i+DU7idd4Z7cHdggnQiYhWWVkACggd3b
9QVCycWgndaXOr0nP7P/8bo=
=tWVM
-----END PGP SIGNATURE-----