samba (3.0.28a-1ubuntu4.15) hardy-security; urgency=low

  * SECURITY UPDATE: cross-site scripting in SWAT
    - debian/patches/security-CVE-2011-2694.patch: don't display username
      in source/web/swat.c.
    - CVE-2011-2694
  * SECURITY UPDATE: cross-site request forgery in SWAT
    - debian/patches/security-CVE-2011-2522.patch: implement nonce in
      source/web/{cgi.c,statuspage.c,swat.c}.
    - CVE-2011-2522

Date: Thu, 28 Jul 2011 10:20:20 -0400
Changed-By: Marc Deslauriers <[email protected]>
Maintainer: Ubuntu Developers <[email protected]>
https://launchpad.net/ubuntu/hardy/+source/samba/3.0.28a-1ubuntu4.15
Format: 1.7
Date: Thu, 28 Jul 2011 10:20:20 -0400
Source: samba
Binary: samba samba-common smbclient swat samba-doc samba-doc-pdf smbfs 
libpam-smbpass libsmbclient libsmbclient-dev winbind samba-dbg
Architecture: source
Version: 3.0.28a-1ubuntu4.15
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu Developers <[email protected]>
Changed-By: Marc Deslauriers <[email protected]>
Description: 
 libpam-smbpass - pluggable authentication module for SMB/CIFS password database
 libsmbclient - shared library that allows applications to talk to SMB/CIFS 
serve
 libsmbclient-dev - libsmbclient static libraries and headers
 samba      - a LanManager-like file and printer server for Unix
 samba-common - Samba common files used by both the server and the client
 samba-dbg  - Samba debugging symbols
 samba-doc  - Samba documentation
 samba-doc-pdf - Samba documentation (PDF format)
 smbclient  - a LanManager-like simple client for Unix
 smbfs      - mount and umount commands for the smbfs (for kernels >= than 2.2.
 swat       - Samba Web Administration Tool
 winbind    - service to resolve user and group information from Windows NT ser
Changes: 
 samba (3.0.28a-1ubuntu4.15) hardy-security; urgency=low
 .
   * SECURITY UPDATE: cross-site scripting in SWAT
     - debian/patches/security-CVE-2011-2694.patch: don't display username
       in source/web/swat.c.
     - CVE-2011-2694
   * SECURITY UPDATE: cross-site request forgery in SWAT
     - debian/patches/security-CVE-2011-2522.patch: implement nonce in
       source/web/{cgi.c,statuspage.c,swat.c}.
     - CVE-2011-2522
Files: 
 726fe35a273f5e065420510bbf2457cb 2224 net optional 
samba_3.0.28a-1ubuntu4.15.dsc
 0f1162b430b19c07d4a016f510891ec8 243541 net optional 
samba_3.0.28a-1ubuntu4.15.diff.gz
Original-Maintainer: Debian Samba Maintainers 
<[email protected]>
-- 
Hardy-changes mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/hardy-changes

Reply via email to