drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Pufferüberläufe in samba
Name: |
Pufferüberläufe in samba
|
|
ID: |
SSA:2004-207-01 |
|
Distribution: |
Slackware |
|
Plattformen: |
Slackware -current, Slackware 8.1, Slackware 9.0, Slackware 9.1, Slackware 10.0 |
|
Datum: |
Mo, 26. Juli 2004, 13:00 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0600
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0686 |
|
Applikationen: |
Samba |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
[slackware-security] new samba packages (SSA:2004-207-01)
New samba packages are available for Slackware 8.1, 9.0, 9.1, 10.0 and -current to fix security issues.
More details about these issues may be found in the Common Vulnerabilities and Exposures (CVE) database:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0600 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0686
Here are the details from the Slackware 10.0 ChangeLog: +--------------------------+ Sun Jul 25 14:17:29 PDT 2004 patches/packages/samba-3.0.5-i486-1.tgz: Upgraded to samba-3.0.5. This fixes a buffer overflow in SWAT and another in the code supporting the 'mangling method = hash' smb.conf option (which is not the default). For more details, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0600 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0686 (* Security fix *) +--------------------------+
Where to find the new packages: +-----------------------------+
Updated package for Slackware 8.1: samba-2.2.10-i386-1.tgz
Updated package for Slackware 9.0: samba-2.2.10-i386-1.tgz
Updated package for Slackware 9.1: samba-2.2.10-i486-1.tgz
Updated package for Slackware 10.0: samba-3.0.5-i486-1.tgz
Updated package for Slackware -current: samba-3.0.5-i486-1.tgz
MD5 signatures: +-------------+
Slackware 8.1 package: 03d53b165cf21bab6c0e26f98268d445 samba-2.2.10-i386-1.tgz
Slackware 9.0 package: 99cba95be5231d46327d3ca055a792db samba-2.2.10-i386-1.tgz
Slackware 9.1 package: 75e92332f92858430fbc01e0adf29c7b samba-2.2.10-i486-1.tgz
Slackware 10.0 package: d4d00d9c748386da1dcd5ab941dbb294 samba-3.0.5-i486-1.tgz
Slackware -current package: d4d00d9c748386da1dcd5ab941dbb294 samba-3.0.5-i486-1.tgz
Installation instructions: +------------------------+
As root, stop the samba server:
. /etc/rc.d/rc.samba stop
Next, upgrade the samba package(s) with upgradepkg:
upgradepkg samba-3.0.5-i486-1.tgz
Finally, start samba again:
. /etc/rc.d/rc.samba start
+-----+
Slackware Linux Security Team http://slackware.com/gpg-key security@slackware.com
+------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@slackware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address. | +------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBBHQ9akRjwEAQIjMRApCvAJ9VElF2jo64tlljiw0UGYFu5aPWrQCgjFh5 ZPCUlzchQaRlA4tNEJx/jZo= =BFwP -----END PGP SIGNATURE-----
|
|
|
|