From owner-cvs-ports@FreeBSD.ORG Fri Jun 26 00:35:26 2009 Return-Path: Delivered-To: cvs-ports@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 24EB11065672; Fri, 26 Jun 2009 00:35:26 +0000 (UTC) (envelope-from timur@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id EA11C8FC12; Fri, 26 Jun 2009 00:35:25 +0000 (UTC) (envelope-from timur@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n5Q0ZPZ0008765; Fri, 26 Jun 2009 00:35:25 GMT (envelope-from timur@repoman.freebsd.org) Received: (from timur@localhost) by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n5Q0ZPVA008764; Fri, 26 Jun 2009 00:35:25 GMT (envelope-from timur) Message-Id: <200906260035.n5Q0ZPVA008764@repoman.freebsd.org> From: "Timur I. Bakeyev" Date: Fri, 26 Jun 2009 00:35:25 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/net/samba32 Makefile distinfo pkg-plist.swat ports/net/samba32/files patch-Makefile.in patch-configure.in patch-lib__iconv.c patch-lib__replace__libreplace_cc.m4 patch-m4__aclocal.m4 patch-nsswitch__pam_winbind.c patch-nsswitch__wins_freebsd.c patch-smbd__quotas.c ... X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Jun 2009 00:35:26 -0000 timur 2009-06-26 00:35:25 UTC FreeBSD ports repository Modified files: net/samba32 Makefile distinfo pkg-plist.swat net/samba32/files patch-Makefile.in patch-configure.in patch-lib__iconv.c patch-lib__replace__libreplace_cc.m4 patch-m4__aclocal.m4 patch-nsswitch__pam_winbind.c patch-nsswitch__wins_freebsd.c patch-smbd__quotas.c patch-smbd__statvfs.c patch-utils__net_time.c Log: Security update of net/samba32 to the 3.2.13 version. o CVE-2009-1886: In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing with file names treat user input as a format string to asprintf. With a maliciously crafted file name smbclient can be made to execute code triggered by the server. o CVE-2009-1888: In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data value can potentially affect access control when "dos filemode" is set to "yes". Security: CVE-2009-1886, CVE-2009-1888 Revision Changes Path 1.10 +2 -3 ports/net/samba32/Makefile 1.8 +3 -3 ports/net/samba32/distinfo 1.4 +42 -4 ports/net/samba32/files/patch-Makefile.in 1.5 +2 -2 ports/net/samba32/files/patch-configure.in 1.4 +2 -2 ports/net/samba32/files/patch-lib__iconv.c 1.4 +2 -2 ports/net/samba32/files/patch-lib__replace__libreplace_cc.m4 1.4 +2 -2 ports/net/samba32/files/patch-m4__aclocal.m4 1.4 +2 -2 ports/net/samba32/files/patch-nsswitch__pam_winbind.c 1.4 +2 -2 ports/net/samba32/files/patch-nsswitch__wins_freebsd.c 1.4 +2 -2 ports/net/samba32/files/patch-smbd__quotas.c 1.4 +2 -2 ports/net/samba32/files/patch-smbd__statvfs.c 1.4 +2 -2 ports/net/samba32/files/patch-utils__net_time.c 1.5 +1 -1 ports/net/samba32/pkg-plist.swat