Update to 2.2.8, which was released today with this note on the

Samba Web site:

       A flaw has been detected in the Samba main smbd code which could
       allow an external attacker to remotely and anonymously gain Super
       User (root) privileges on a server running a Samba server. This
       flaw exists in previous versions of Samba from 2.0.x to 2.2.7a
       inclusive. This is a serious problem and all sites should either
       upgrade to Samba 2.2.8 immediately or prohibit access to TCP ports
       139 and 445.

I tested this in the same environment as before.

This should be fetchable too.

Requested by:	dwcjr (maintainer)
pointy hat to:	my collection
This commit is contained in:
Trevor Johnson 2003-03-15 21:48:17 +00:00
parent 153aa7492e
commit 5085c42a9b
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=77134
2 changed files with 2 additions and 5 deletions

View file

@ -6,14 +6,12 @@
#
PORTNAME= samba
PORTVERSION= 2.2.7a.20030314
PORTVERSION= 2.2.8
CATEGORIES= net
MASTER_SITES= http://us3.samba.org/samba/ftp/%SUBDIR%/ \
http://us4.samba.org/samba/ftp/%SUBDIR%/ \
http://us5.samba.org/samba/ftp/%SUBDIR%/
MASTER_SITE_SUBDIR= . old-versions
DISTNAME= ${PORTNAME}-2.2.7a
PATCHFILES= samba-2.2.7a-vs-2.2-20030314.diff.bz2
MAINTAINER= dwcjr@FreeBSD.org
COMMENT= A free SMB and CIFS client and server for UNIX

View file

@ -1,2 +1 @@
MD5 (samba-2.2.7a.tar.bz2) = 8db28b53c27f8cbd564382d2f5f1787c
MD5 (samba-2.2.7a-vs-2.2-20030314.diff.bz2) = aa4b36fb659a2ccf1be1c133a3b9c084
MD5 (samba-2.2.8.tar.bz2) = f11004debeb8a34fd269d06ff08ac926