Format: 1.8 Date: Mon, 09 Dec 2013 11:07:25 -0500 Source: samba Binary: samba samba-common-bin samba-common samba-tools smbclient swat samba-doc samba-doc-pdf libpam-smbpass libsmbclient libsmbclient-dev winbind libpam-winbind samba-dbg libwbclient0 libwbclient-dev Architecture: armhf armhf_translations Version: 2:3.6.3-2ubuntu2.9 Distribution: precise Urgency: low Maintainer: Ubuntu/armhf Build Daemon Changed-By: Marc Deslauriers Description: libpam-smbpass - pluggable authentication module for Samba libpam-winbind - Samba nameservice and authentication integration plugins libsmbclient - shared library for communication with SMB/CIFS servers libsmbclient-dev - development files for libsmbclient libwbclient-dev - Samba winbind client library - development files libwbclient0 - Samba winbind client library samba - SMB/CIFS file, print, and login server for Unix samba-common - common files used by both the Samba server and client samba-common-bin - common files used by both the Samba server and client samba-dbg - Samba debugging symbols samba-doc - Samba documentation samba-doc-pdf - Samba documentation in PDF format samba-tools - Samba testing utilities smbclient - command-line SMB/CIFS clients for Unix swat - Samba Web Administration Tool winbind - Samba nameservice integration server Changes: samba (2:3.6.3-2ubuntu2.9) precise-security; urgency=low . * SECURITY UPDATE: file restrictions bypass via alternate data streams - debian/patches/CVE-2013-4475.patch: properly check base file access in source3/smbd/open.c. - CVE-2013-4475 * SECURITY UPDATE: pam_winbind access restriction bypass via invalid group names - debian/patches/CVE-2012-6150.patch: ensure valid groups in nsswitch/pam_winbind.c. - CVE-2012-6150 * SECURITY UPDATE: arbitrary code execution via incorrect DCE-RPC fragment length field checking - debian/patches/CVE-2013-4408.patch: apply massive upstream fix to lib/async_req/async_sock.c, libcli/util/tstream.c, librpc/idl/dcerpc.idl, librpc/rpc/dcerpc_util.c, librpc/rpc/rpc_common.h, nsswitch/libwbclient/wbc_sid.c, nsswitch/wbinfo.c, source3/lib/netapi/{group,localgroup,user}.c, source3/lib/util_tsock.c, source3/libnet/libnet_join.c, source3/librpc/rpc/dcerpc_helpers.c, source3/rpc_client/{cli_lsarpc,cli_pipe}.c, source3/rpc_server/netlogon/srv_netlog_nt.c, source3/rpcclient/{cmd_lsarpc,cmd_samr}.c, source3/smbd/lanman.c, source3/utils/net_rpc.c, source3/utils/net_rpc_join.c, source3/winbindd/{wb_lookupsids,winbindd_msrpc,winbindd_rpc}.c, source4/libcli/util/clilsa.c, source4/libnet/{groupinfo,groupman, libnet_join,libnet_lookup,libnet_passwd,userinfo,userman}.c, source4/librpc/rpc/{dcerpc,dcerpc_smb,dcerpc_smb2,dcerpc_sock}.c, source4/winbind/wb_async_helpers.c. - CVE-2013-4408 Checksums-Sha1: dca75377661349541f8c60749feb3734a05181f7 6828292 samba_3.6.3-2ubuntu2.9_armhf.deb a2903870e53d8dd24450323df55d7262ad0f0910 5306590 samba-common-bin_3.6.3-2ubuntu2.9_armhf.deb a4dc99a5089fd9804a5beae10a364f8f27022deb 9920340 samba-tools_3.6.3-2ubuntu2.9_armhf.deb 2770da97c632f08edc9ab3694627d716e50b997c 12199720 smbclient_3.6.3-2ubuntu2.9_armhf.deb 5b938e2ca2202c894e8428c0f71a2967d30e97da 1923262 swat_3.6.3-2ubuntu2.9_armhf.deb 8119b1b1a8bc8c57c8c697df91ef47e39e21b8ac 633346 libpam-smbpass_3.6.3-2ubuntu2.9_armhf.deb ede392551a79968ad89b29a4e196eec8f1fdf153 1876918 libsmbclient_3.6.3-2ubuntu2.9_armhf.deb d78aa39f26cfa22cb215d7dfd763c8e98a1f5752 2618308 libsmbclient-dev_3.6.3-2ubuntu2.9_armhf.deb 08365ce91a7203cb91617d4d7c1bd1eba032c008 3789614 winbind_3.6.3-2ubuntu2.9_armhf.deb c0d2972b457ef622235d87899d1f10d99acadd75 515446 libpam-winbind_3.6.3-2ubuntu2.9_armhf.deb 445ea9e9abeb3c358d2cc6b08ceaeeba68e2651e 51603906 samba-dbg_3.6.3-2ubuntu2.9_armhf.deb e9b84aeac429095f55a8b3dadf085fea8af16349 25066 libwbclient0_3.6.3-2ubuntu2.9_armhf.deb 536df60d003c7ba7f3df2366111e3da91c6b5bb8 9996 libwbclient-dev_3.6.3-2ubuntu2.9_armhf.deb 07972e049625c6f0faf1e4d0b45e6d025c3305d6 160211 samba_3.6.3-2ubuntu2.9_armhf_translations.tar.gz Checksums-Sha256: d160a1553d59fb4f542cdcfa3afe460a144c40fed2c8bbda7e4869c0b0a18b23 6828292 samba_3.6.3-2ubuntu2.9_armhf.deb 1afbb674a69d91995ced676ce14ba029c17a017333ce414f6708b656ee347cc2 5306590 samba-common-bin_3.6.3-2ubuntu2.9_armhf.deb 40fcdc2a34bac9da3363c62b71e1d00052d6603df7b47f9c0c659e5926f6ca19 9920340 samba-tools_3.6.3-2ubuntu2.9_armhf.deb 415a24191b0a42c933151937cf7e2216a7023627908a79d460815dc7f9f38607 12199720 smbclient_3.6.3-2ubuntu2.9_armhf.deb 2b3a15b003c12922fe54247539621c99022e6620cf5d6425547ae79b73a48e55 1923262 swat_3.6.3-2ubuntu2.9_armhf.deb f7a7946f2593796307e7a2457bb3fb1115ad083025062c1b73f0e08d667549ba 633346 libpam-smbpass_3.6.3-2ubuntu2.9_armhf.deb 1ba20d392c727364e6e55e82123bdd33e71a0b9a8fd44cf11687d5061a93111d 1876918 libsmbclient_3.6.3-2ubuntu2.9_armhf.deb ed985b4e66459768069d9b4d6057902608ab9cab637c5e943f6dadbb71ef0cf8 2618308 libsmbclient-dev_3.6.3-2ubuntu2.9_armhf.deb b71f1245012656f37a5f1061b7ee63d9ee424ae9b8cc179917c7135abb02231e 3789614 winbind_3.6.3-2ubuntu2.9_armhf.deb 2b2ec2d0c17edd1600382a1457f9db9fc778de8daac09ebe817a32797c620343 515446 libpam-winbind_3.6.3-2ubuntu2.9_armhf.deb 6ddb1fa9a8a7dfd4ebb544996144e5bfb8c6c0e0f8fe9284f4c14907c72c1024 51603906 samba-dbg_3.6.3-2ubuntu2.9_armhf.deb d5c02ee485b40cab4f9f1e9f59ceb45eb0aa5bd0a346119e47e035e9c5a9784e 25066 libwbclient0_3.6.3-2ubuntu2.9_armhf.deb aa5d03bf0f4f5f132b05b735a32d7be0d5f42774b63ffe758e6a61a90d304d5d 9996 libwbclient-dev_3.6.3-2ubuntu2.9_armhf.deb 3aa89503066bd7a02a936dc300efa21cd94c7421b279409bb712829c5bc3d6b5 160211 samba_3.6.3-2ubuntu2.9_armhf_translations.tar.gz Files: ef04702fe94f38b7d920fc54e9c9c40d 6828292 net optional samba_3.6.3-2ubuntu2.9_armhf.deb ac8a0c92bc0ce96e0354619c09aafbfd 5306590 net optional samba-common-bin_3.6.3-2ubuntu2.9_armhf.deb 3c30616a6fa65cd4305903c0f827a39b 9920340 net optional samba-tools_3.6.3-2ubuntu2.9_armhf.deb 24ad27bbdc73096e298b9ccc1bb2958a 12199720 net optional smbclient_3.6.3-2ubuntu2.9_armhf.deb ee0456f08cc95910e939629afcbfc164 1923262 net optional swat_3.6.3-2ubuntu2.9_armhf.deb 68bd2be78307994966863cd46ad73e25 633346 admin extra libpam-smbpass_3.6.3-2ubuntu2.9_armhf.deb 1dd978826b3ff94d58c36ccbc3c230b8 1876918 libs optional libsmbclient_3.6.3-2ubuntu2.9_armhf.deb fad3fd7427113de6c44909ef09603f63 2618308 libdevel extra libsmbclient-dev_3.6.3-2ubuntu2.9_armhf.deb 6b70574d51c9053c262dbbb4f03be84d 3789614 net optional winbind_3.6.3-2ubuntu2.9_armhf.deb f380a0f706f8cfdb76cc1f1e62e2e2f7 515446 net optional libpam-winbind_3.6.3-2ubuntu2.9_armhf.deb ec47ed2ae032219589e4ed7bfb2938dc 51603906 debug extra samba-dbg_3.6.3-2ubuntu2.9_armhf.deb 667235053a38ac43aef646f6fb15b681 25066 libs optional libwbclient0_3.6.3-2ubuntu2.9_armhf.deb 69a91e15a9ff2b4362a7ad3cfcd59f28 9996 libdevel optional libwbclient-dev_3.6.3-2ubuntu2.9_armhf.deb 729bcf0cdf76858a34fdb7a4985e3934 160211 raw-translations - samba_3.6.3-2ubuntu2.9_armhf_translations.tar.gz Original-Maintainer: Debian Samba Maintainers