Format: 1.8 Date: Mon, 09 Dec 2013 10:13:51 -0500 Source: samba Binary: samba samba-common-bin samba-common samba-tools smbclient swat samba-doc samba-doc-pdf libpam-smbpass libsmbclient libsmbclient-dev winbind libpam-winbind libnss-winbind samba-dbg libwbclient0 libwbclient-dev Architecture: armhf armhf_translations Version: 2:3.6.18-1ubuntu3.1 Distribution: saucy Urgency: low Maintainer: Ubuntu/armhf Build Daemon Changed-By: Marc Deslauriers Description: libnss-winbind - Samba nameservice integration plugins libpam-smbpass - pluggable authentication module for Samba libpam-winbind - Windows domain authentication integration plugin libsmbclient - shared library for communication with SMB/CIFS servers libsmbclient-dev - development files for libsmbclient libwbclient-dev - Samba winbind client library - development files libwbclient0 - Samba winbind client library samba - SMB/CIFS file, print, and login server for Unix samba-common - common files used by both the Samba server and client samba-common-bin - common files used by both the Samba server and client samba-dbg - Samba debugging symbols samba-doc - Samba documentation samba-doc-pdf - Samba documentation in PDF format samba-tools - Samba testing utilities smbclient - command-line SMB/CIFS clients for Unix swat - Samba Web Administration Tool winbind - Samba nameservice integration server Changes: samba (2:3.6.18-1ubuntu3.1) saucy-security; urgency=low . * SECURITY UPDATE: file restrictions bypass via alternate data streams - debian/patches/CVE-2013-4475.patch: properly check base file access in source3/smbd/open.c. - CVE-2013-4475 * SECURITY UPDATE: pam_winbind access restriction bypass via invalid group names - debian/patches/CVE-2012-6150.patch: ensure valid groups in nsswitch/pam_winbind.c. - CVE-2012-6150 * SECURITY UPDATE: arbitrary code execution via incorrect DCE-RPC fragment length field checking - debian/patches/CVE-2013-4408.patch: apply massive upstream fix to lib/async_req/async_sock.c, libcli/util/tstream.c, librpc/idl/dcerpc.idl, librpc/rpc/dcerpc_util.c, librpc/rpc/rpc_common.h, nsswitch/libwbclient/wbc_sid.c, nsswitch/wbinfo.c, source3/lib/netapi/{group,localgroup,user}.c, source3/lib/util_tsock.c, source3/libnet/libnet_join.c, source3/librpc/rpc/dcerpc_helpers.c, source3/rpc_client/{cli_lsarpc,cli_pipe}.c, source3/rpc_server/netlogon/srv_netlog_nt.c, source3/rpcclient/{cmd_lsarpc,cmd_samr}.c, source3/smbd/lanman.c, source3/utils/net_rpc.c, source3/utils/net_rpc_join.c, source3/winbindd/{wb_lookupsids,winbindd_msrpc,winbindd_rpc}.c, source4/libcli/util/clilsa.c, source4/libnet/{groupinfo,groupman, libnet_join,libnet_lookup,libnet_passwd,userinfo,userman}.c, source4/librpc/rpc/{dcerpc,dcerpc_smb,dcerpc_smb2,dcerpc_sock}.c, source4/winbind/wb_async_helpers.c. - CVE-2013-4408 Checksums-Sha1: 6726271b791ea585ec8d3bf54dbc5156721ab661 3209680 samba_3.6.18-1ubuntu3.1_armhf.deb 0320a9edf619e2faea67f8ea87c358630432d491 2596520 samba-common-bin_3.6.18-1ubuntu3.1_armhf.deb 421b280d05b9b5e46ca7e0e2dbd46eb36681e8bb 3792162 samba-tools_3.6.18-1ubuntu3.1_armhf.deb 9b0b430b95b2ff5d8dade8c3fdd40313567865bc 4129156 smbclient_3.6.18-1ubuntu3.1_armhf.deb 531a81ae7a08404c6da70e2ae7be283e4e849a8a 1411830 swat_3.6.18-1ubuntu3.1_armhf.deb 812b3408f056586df353793a2e13f82c6c66b952 499126 libpam-smbpass_3.6.18-1ubuntu3.1_armhf.deb 2cbed1aced8d3308467d440ab3b924d5aad641f8 1228516 libsmbclient_3.6.18-1ubuntu3.1_armhf.deb 95003f667190a45138c970251a2eec3aab172b56 1649696 libsmbclient-dev_3.6.18-1ubuntu3.1_armhf.deb 414b0d90c415dadc27139fe243adfd5f9f1a72c5 2067704 winbind_3.6.18-1ubuntu3.1_armhf.deb 5a168bce9bfa99382181e9c171510f7de4bcc01b 24242 libpam-winbind_3.6.18-1ubuntu3.1_armhf.deb 37a3ee01147482199bc43feb96b93a1f5c1304cd 382444 libnss-winbind_3.6.18-1ubuntu3.1_armhf.deb 4866c0924e30fb3a62151b5156d92627ac80a855 64178974 samba-dbg_3.6.18-1ubuntu3.1_armhf.deb 80e3c33598e26bf592a035940d887dfb748aa2b8 22770 libwbclient0_3.6.18-1ubuntu3.1_armhf.deb 1ad9c21bfc4432675571cccaa89523a30d1f8958 9498 libwbclient-dev_3.6.18-1ubuntu3.1_armhf.deb 35d1df1d50ea3a315160e65e2f7200d2d3677c15 126675 samba_3.6.18-1ubuntu3.1_armhf_translations.tar.gz Checksums-Sha256: 04e6aedae34c2fbf47a2d5a79429ebe1ed4d0d42843504527e0a02f0a4f4d113 3209680 samba_3.6.18-1ubuntu3.1_armhf.deb c0daa9a17f18c7204c9dc5873af459a6b18e9dd73c4d4055f62c03b86f9fb2a7 2596520 samba-common-bin_3.6.18-1ubuntu3.1_armhf.deb 9ab6f56c090de2ba4728e1c997cea45b2fa71cd3d10370255ad79bd9fa4e8385 3792162 samba-tools_3.6.18-1ubuntu3.1_armhf.deb a503e1bdf96077be7ebc2eae06d5349d53ce9632a011e83fcd8d48198a70f23a 4129156 smbclient_3.6.18-1ubuntu3.1_armhf.deb 818b8c9e63596694397457bb3473b659ff57cafcd8ce33418e27ca311f4b8643 1411830 swat_3.6.18-1ubuntu3.1_armhf.deb cae2091ae86ebf91745fbcdef8dde523582837910b2bfa6f8d01649defae1117 499126 libpam-smbpass_3.6.18-1ubuntu3.1_armhf.deb 7af3c7aab9aacb9643f85dd9496b77978dbbb56174d7581819fdff4cf6ae0a79 1228516 libsmbclient_3.6.18-1ubuntu3.1_armhf.deb 382a6791dcf94c5b2698501f0e7a7f2aa189f244d5d1fa15e365eb3daf68df83 1649696 libsmbclient-dev_3.6.18-1ubuntu3.1_armhf.deb 0cecc1cd98c8a35b56af7d6f6968c54a749621d4e51490b804e55192d350ef8d 2067704 winbind_3.6.18-1ubuntu3.1_armhf.deb 7144cc0385e4fe8093159aee4e6c24d3ce93f67242244317a47c6554ec4414f1 24242 libpam-winbind_3.6.18-1ubuntu3.1_armhf.deb c58af76b6ae1bfe11cd9f3e23024e00eaf0b8932ef636500b5952c7751fe95a6 382444 libnss-winbind_3.6.18-1ubuntu3.1_armhf.deb c36ae1fe53b7d9224ac34460fc393e71939aca046b95c1ef9c64a62a359ec9db 64178974 samba-dbg_3.6.18-1ubuntu3.1_armhf.deb 78d7ed82b27155a37ab3e9886a8068df04bf3041598f243cb815d728ea59545b 22770 libwbclient0_3.6.18-1ubuntu3.1_armhf.deb 9fe78768d7b3eb6ce235bd552bd266c2a07c636eaaae1c2db61d96d12eca04b8 9498 libwbclient-dev_3.6.18-1ubuntu3.1_armhf.deb fdee74b09affea2167fef92e09f67aacaa0bad3e69330c8a3c2151f47131b8b7 126675 samba_3.6.18-1ubuntu3.1_armhf_translations.tar.gz Files: af0b65211ab0444accc5149463210b3a 3209680 net optional samba_3.6.18-1ubuntu3.1_armhf.deb 93f16b03828d1809566ff037f77a7386 2596520 net optional samba-common-bin_3.6.18-1ubuntu3.1_armhf.deb 7259ba834313e2a3e7afa327078cae71 3792162 net optional samba-tools_3.6.18-1ubuntu3.1_armhf.deb 4845d8e9d10e670ce2204680e3aed760 4129156 net optional smbclient_3.6.18-1ubuntu3.1_armhf.deb bd8829e3f12b28498b094e5b6562abc8 1411830 net optional swat_3.6.18-1ubuntu3.1_armhf.deb 65ee412aa42dfc2a7b2a4d7f73a4344a 499126 admin extra libpam-smbpass_3.6.18-1ubuntu3.1_armhf.deb 197871090b9a55bcd9dba94221ae561d 1228516 libs optional libsmbclient_3.6.18-1ubuntu3.1_armhf.deb 0d9cd4be4014848132bafad939a94e3f 1649696 libdevel extra libsmbclient-dev_3.6.18-1ubuntu3.1_armhf.deb f77032b862c0ea2550532eb612130d48 2067704 net optional winbind_3.6.18-1ubuntu3.1_armhf.deb 228769b022d6b3e371fb97d9c81108e2 24242 net optional libpam-winbind_3.6.18-1ubuntu3.1_armhf.deb dd9db6bc8478ac0dee57478c1003cf4f 382444 net optional libnss-winbind_3.6.18-1ubuntu3.1_armhf.deb 66eb0ac9b73121495ea1906886c5ac98 64178974 debug extra samba-dbg_3.6.18-1ubuntu3.1_armhf.deb 6dc9e77bf2ac5cd2d374ba0c4de895c5 22770 libs optional libwbclient0_3.6.18-1ubuntu3.1_armhf.deb e2ac8a256b387a7c02b1a6d1ddd3a6d6 9498 libdevel optional libwbclient-dev_3.6.18-1ubuntu3.1_armhf.deb 346408a9a6dc28938672cf8a138c4c06 126675 raw-translations - samba_3.6.18-1ubuntu3.1_armhf_translations.tar.gz Original-Maintainer: Debian Samba Maintainers