packages (AC-branch): samba/samba.spec - fix CVE-2010-3069 - fix CVE-2012-1...

glen glen at pld-linux.org
Fri Apr 20 18:41:07 CEST 2012


Author: glen                         Date: Fri Apr 20 16:41:07 2012 GMT
Module: packages                      Tag: AC-branch
---- Log message:
- fix CVE-2010-3069
- fix CVE-2012-1182 ("root" credential remote code execution)
- rel 4

---- Files affected:
packages/samba:
   samba.spec (1.348.2.7.2.18 -> 1.348.2.7.2.19) 

---- Diffs:

================================================================
Index: packages/samba/samba.spec
diff -u packages/samba/samba.spec:1.348.2.7.2.18 packages/samba/samba.spec:1.348.2.7.2.19
--- packages/samba/samba.spec:1.348.2.7.2.18	Fri Jun 18 12:16:27 2010
+++ packages/samba/samba.spec	Fri Apr 20 18:41:01 2012
@@ -42,7 +42,7 @@
 Summary(zh_CN.UTF-8):	Samba 客户端和服务器
 Name:		samba
 Version:	3.0.37
-Release:	3
+Release:	4
 Epoch:		1
 License:	GPL v2
 Group:		Networking/Daemons
@@ -67,7 +67,11 @@
 Patch6:		%{name}-libs-needed.patch
 Patch7:		%{name}-lprng-no-dot-printers.patch
 Patch8:		%{name}-printerlocation.patch
-Patch9:		http://www.samba.org/samba/ftp/patches/security/samba-3.0.37-CVE-2010-2063.patch
+Patch9:		http://www.samba.org/samba/ftp/patches/security/%{name}-3.0.37-CVE-2010-2063.patch
+Patch10:	https://ftp.samba.org/pub/samba/patches/security/%{name}-3.0.37-CVE-2010-3069.patch
+# Patch10-md5:	675ecfd66015fb40bf4b98a8429314d0
+Patch11:	https://ftp.samba.org/pub/samba/patches/security/%{name}-3.0.37-CVE-2012-1182.patch
+# Patch11-md5:	1edad3a8e42fad2f7aaa2d9cd9082123
 URL:		http://www.samba.org/
 BuildRequires:	acl-devel
 BuildRequires:	autoconf
@@ -957,6 +961,8 @@
 %patch7 -p1
 %patch8 -p1
 %patch9 -p1
+%patch10 -p1
+%patch11 -p1
 %{__sed} -i 's#%SAMBAVERSION%#%{version}#' docs/htmldocs/index.html
 
 cd examples/VFS
@@ -1507,6 +1513,11 @@
 All persons listed below can be reached at <cvs_login>@pld-linux.org
 
 $Log$
+Revision 1.348.2.7.2.19  2012/04/20 16:41:01  glen
+- fix CVE-2010-3069
+- fix CVE-2012-1182 ("root" credential remote code execution)
+- rel 4
+
 Revision 1.348.2.7.2.18  2010/06/18 10:16:27  glen
 - fix for CVE-2010-2063; rel 3
 
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/packages/samba/samba.spec?r1=1.348.2.7.2.18&r2=1.348.2.7.2.19



More information about the pld-cvs-commit mailing list