Received: from mail.netbsd.org (mail.netbsd.org [149.20.53.66]) by www.NetBSD.org (Postfix) with ESMTP id 5FB9F63B9FE for ; Wed, 11 Apr 2012 11:26:23 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 605) id 219DA14A18E; Wed, 11 Apr 2012 11:26:37 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 6464014A161 for ; Wed, 11 Apr 2012 11:26:32 +0000 (UTC) X-Virus-Scanned: amavisd-new at NetBSD.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.NetBSD.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id BwGnuo118oZA for ; Wed, 11 Apr 2012 11:26:31 +0000 (UTC) Received: from cvs.netbsd.org (cvs.NetBSD.org [IPv6:2001:4f8:3:7:2e0:81ff:fe30:95bd]) by mail.netbsd.org (Postfix) with ESMTP id A8CEC14A12B for ; Wed, 11 Apr 2012 11:26:31 +0000 (UTC) Received: by cvs.netbsd.org (Postfix, from userid 500) id 30C3E175DD; Wed, 11 Apr 2012 11:26:31 +0000 (UTC) MIME-Version: 1.0 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Date: Wed, 11 Apr 2012 11:26:31 +0000 From: "Matthias Scheler" Subject: CVS commit: [pkgsrc-2012Q1] pkgsrc/net To: pkgsrc-changes@NetBSD.org Reply-To: tron@netbsd.org X-Mailer: log_accum Message-Id: <20120411112631.30C3E175DD@cvs.netbsd.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk Module Name: pkgsrc Committed By: tron Date: Wed Apr 11 11:26:30 UTC 2012 Modified Files: pkgsrc/net/samba [pkgsrc-2012Q1]: Makefile distinfo pkgsrc/net/samba35 [pkgsrc-2012Q1]: Makefile distinfo Log Message: Pullup ticket #3729 - requested by jdf net/samba: security update net/samba35: security update Revisions pulled up: - net/samba/Makefile 1.218 - net/samba/distinfo 1.84 - net/samba35/Makefile 1.19 - net/samba35/distinfo 1.11 --- Module Name: pkgsrc Committed By: asau Date: Wed Apr 11 09:36:21 UTC 2012 Modified Files: pkgsrc/net/samba35: Makefile distinfo Log Message: Update to Samba 3.5.14 This is a security release in order to address CVE-2012-1182 ("root" credential remote code execution). o CVE-2012-1182: Samba 3.0.x to 3.6.3 are affected by a vulnerability that allows remote code execution as the "root" user. Changes since 3.5.13: --------------------- o Stefan Metzmacher *BUG 8815: PIDL based autogenerated code allows overwriting beyond of allocated array (CVE-2012-1182). --- Module Name: pkgsrc Committed By: asau Date: Wed Apr 11 09:30:09 UTC 2012 Modified Files: pkgsrc/net/samba: Makefile distinfo Log Message: Update to Samba 3.6.4 This is a security release in order to address CVE-2012-1182 ("root" credential remote code execution). o CVE-2012-1182: Samba 3.0.x to 3.6.3 are affected by a vulnerability that allows remote code execution as the "root" user. Changes since 3.6.3: -------------------- o Stefan Metzmacher *BUG 8815: PIDL based autogenerated code allows overwriting beyond of allocated array (CVE-2012-1182). To generate a diff of this commit: cvs rdiff -u -r1.217 -r1.217.2.1 pkgsrc/net/samba/Makefile cvs rdiff -u -r1.83 -r1.83.2.1 pkgsrc/net/samba/distinfo cvs rdiff -u -r1.18 -r1.18.2.1 pkgsrc/net/samba35/Makefile cvs rdiff -u -r1.10 -r1.10.2.1 pkgsrc/net/samba35/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.