Fedora 9: 2008-7243 Moderate: Samba Security Fix CVE-2008-3789

Samba is the suite of programs by which a lot of PC-related machines

share files, printers, and other information (such as lists of

available files and printers). The Windows NT, OS/2, and Linux

operating systems support this natively, and add-on packages can

enable the same thing for DOS, Windows, VMS, UNIX of all kinds, MVS,

and more. This package provides an SMB/CIFS server that can be used to

provide network services to SMB/CIFS clients.

Samba uses NetBIOS over TCP/IP (NetBT) protocols and does NOT

need the NetBEUI (Microsoft Raw NetBIOS frame) protocol.

Security fix for CVE-2008-3789 detailed in the upstream advisory:

/samba/security/CVE-2008-3789.html

* Wed Aug 27 2008 Guenther Deschner - 3.2.3-0.20

- Security fix for CVE-2008-3789

* Wed Aug 20 2008 Guenther Deschner - 3.2.2-0.19

- Update to 3.2.2

- resolves: #456889

* Wed Aug 6 2008 Simo Sorce - 3.2.1-0.18

- Update to 3.2.1

* Tue Jul 1 2008 Guenther Deschner - 3.2.0-2.17

- Update to 3.2.0 final

- resolves: #452622

* Tue Jun 10 2008 Guenther Deschner - 3.2.0-1.rc2.16

- Update to 3.2.0rc2

- resolves: #449522

- resolves: #448107

* Fri May 30 2008 Guenther Deschner - 3.2.0-1.rc1.15

- Fix security=server

- resolves: #449038, #449039

* Wed May 28 2008 Guenther Deschner - 3.2.0-1.rc1.14

- Add fix for CVE-2008-1105

- resolves: #446724

* Fri May 23 2008 Guenther Deschner - 3.2.0-1.rc1.13

- Update to 3.2.0rc1

* Wed May 21 2008 Simo Sorce - 3.2.0-1.pre3.12

- make it possible to print against Vista and XP SP3 as servers

- resolves: #439154

* Thu May 15 2008 Guenther Deschner - 3.2.0-1.pre3.11

- Add "net ads join createcomputer=ou1/ou2/ou3" fix (BZO #5465)

* Fri May 9 2008 Guenther Deschner - 3.2.0-1.pre3.10

- Add smbclient fix (BZO #5452)

[ 1 ] Bug #460150 - CVE-2008-3789 samba: Group mapping information LDB file created with insecure permissions

https://bugzilla.redhat.com/show_bug.cgi?id=460150

su -c 'yum update samba' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/