Branches for Karmic

Author: Marc Deslauriers
Revision Date: 2009-10-01 08:20:29 UTC

* SECURITY UPDATE: whole filesystem share via user with no home directory
  - debian/patches/security-CVE-2009-2813.patch: make sure home directory
    is set in source3/param/loadparm.c, source3/smbd/service.c.
  - CVE-2009-2813
* SECURITY UPDATE: credentials file disclosure and unauthorized usage via
  setuid mount.cifs
  - debian/patches/security-CVE-2009-2948.patch: don't open credentials
    file if user doesn't have permission, and don't print password when
    using verbose option in source3/client/mount.cifs.c.
  - CVE-2009-2948
* SECURITY UPDATE: denial of service via unexpected oplock break
  notification reply
  - debian/patches/security-CVE-2009-2906.patch: track messages already
    processed in source3/include/smb.h, source3/smbd/process.c.
  - CVE-2009-2906

Author: Chuck Short
Revision Date: 2010-02-05 15:03:50 UTC

* debian/patches/fix-libsmb-keepalive-packets.patch: Fix winbind authentication
  due to an invalid NTML2 signature. (LP: #479955)
  (https://bugzilla.samba.org/show_bug.cgi?id=6646)
* debian/patches/fix-samba-point-and-print.patch: Allow automatic download
  of printer drivers from a Samba PDC (LP: #500457)
  (https://bugzilla.samba.org/show_bug.cgi?id=6568)
* debian/patches/fix-too-many-openfiles.patch: When connecting to a Windows
  7 share users will get an error message "Too many open files are in use"
  after a certain number of files are copied. (LP: #462172 )
  (https://bugzilla.samba.org/show_bug.cgi?id=6837)
* debian/patches/fix-win98-failed-connect.patch: Allow win98 clients to
  connect a samba server. Users will get an "Error 66" message. (LP: #502878)
  (https://bugzilla.samba.org/show_bug.cgi?id=6551)

Author: Marc Deslauriers
Revision Date: 2011-02-23 16:21:11 UTC

* SECURITY UPDATE: denial of service via missing range checks on file
  descriptors
  - debian/patches/security-CVE-2011-0719.patch: validate miscellaneous
    file descriptors.
  - CVE-2011-0719

Author: Marc Deslauriers
Revision Date: 2011-02-23 16:21:11 UTC

* SECURITY UPDATE: denial of service via missing range checks on file
  descriptors
  - debian/patches/security-CVE-2011-0719.patch: validate miscellaneous
    file descriptors.
  - CVE-2011-0719