[prev in list] [next in list] [prev in thread] [next in thread]
List: debian-security
Subject: Re: UNS: Re: [SECURITY] [DSA 1409-2] New samba packages fix several vulnerabilities
From: Steve Kemp <skx () debian ! org>
Date: 2007-11-27 19:15:11
Message-ID: 20071127191511.GA19628 () steve ! org ! uk
[Download RAW message or body]
On Tue Nov 27, 2007 at 12:00:05 +1300, Ewen McNeill wrote:
> In message <20071126145341.GA3961@steve.org.uk>, Steve Kemp writes:
> >Package : samba
> >Vulnerability : several
> >Problem type : remote
> >Debian-specific: no
> >CVE Id(s) : CVE-2007-4572, CVE-2007-5398
> >[...]
> >For the stable distribution (etch), these problems have been fixed in
> >version 3.0.24-6etch7.
>
> There doesn't appear to be a i386 package for Samba version
> 3.0.24-6etch7 on any of the security.debian.org servers. Only a
> 3.0.24-6etch6 package. AMD64 and most other architectures seem to have
> 3.0.24-6etch7 and not 3.0.24-6etch6 packages.
> According to the change log this means that one regression is missing
> in the i386 packages (6etch6):
That is correct.
I've build a package now, and will be uploading shortly. In the
meantime you can find it here:
http://people.debian.org/~skx/samba/
I'm not entirely sure whether this fixes all known regressions there
seem to be mixed reports, but it is the best we have and the most
current elsewhere.
Steve
--
--
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic