Re: [SECURITY] [DSA 1291-1] New samba packages fix multiple vulnerabilities

1 msg	Roland Lichti ist außer Haus.
13 msg	iptables and nmap
11 msg	Package management and security
1 msg	Parte del diario del coronel
4 msg	Re: PERSONAL LOAN - KTA
1 msg	Security features of Debian
1 msg	Wolfgang Rest/SALZBURG/PGV ist außer Haus.
3 msg	Security features of Debian Etch?
1 msg	Restrict remote access by time?
1 msg	Re: [SECURITY] [DSA 1297-1] New gforge-plugin-s...
1 msg	For Your Kind Attention
2 msg	CVE-2006-4625 Vulnerability not fixed on libapa...
1 msg	Administre su pymes - Maximice sus ganancias
1 msg	Re: [SECURITY] [DSA 1293-1] New quagga packages...
2 msg	Re: [SECURITY] [DSA 1292-1] New qt4-x11 package...

Re: [SECURITY] [DSA 1291-1] New samba packages ...
\ Roberto C. Sánchez (15 May 2007)
. \ Geoff Crompton (15 May 2007)
. \ Moritz Muehlenhoff (16 May 2007)
. . \ Thomas Korber (16 May 2007)
. . . \ Noah Meyerhans (16 May 2007)

6 msg	debian.org DNSs allow unrestricted zone transfers
1 msg	Re: [SECURITY] [DSA 1289-1] New Linux 2.6.18 pa...
10 msg	security mirror out of date: 128.101.240.212
15 msg	spooky windows script

Subject:	Re: [SECURITY] [DSA 1291-1] New samba packages fix multiple vulnerabilities
Group:	Debian-security
From:	Noah Meyerhans
Date:	16 May 2007

On Wed, May 16, 2007 at 09:39:56PM +0200, Thomas Korber wrote:
> Moritz Muehlenhoff <jmm> writes:
>
> >> Nice work on getting this out. Is sarge going to get an update, is it
> >> even affected? I've looked into CVE-2007-2444, and
> >> http://www.securityfocus.com/bid/23974/ says that the version in sarge
> >> is affected.
>
> > Sarge is still missing a few builds.
>
> And what about updated packages for sparc and arm? My samba daemon runs
> on an old Ultra 60... :-)

For the moment you may be better off without the update. See e.g. bug
424629. (obviously if you machines get rooted then this isn't much
help...)

noah