[Bug 932239] Re: Multiple Samba security vulnerabilities

2012-02-17 Thread Steve Beattie
Note that Ubuntu, like many linux distributions,  backports security
fixes rather than upgrading to new versions of software to attempt to
prevent the introduction of regressions and changes in behavior in
released versions of software.

CVE-2010-3069 was addressed in http://www.ubuntu.com/usn/usn-987-1
CVE-2011-2522 and CVE-2011-2694 were addressed in 
http://www.ubuntu.com/usn/usn-1182-1
CVE-2011-0719 was addressed in http://www.ubuntu.com/usn/usn-1075-1
CVE-2010-1635 and CVE-2010-1642 can only kill the current connection of the 
attacker, the vulnerabilities do not affect the service as a whole, and as such 
have negligable security impact. They've also been addressed in maverick and 
subsequent releases.

What is Manzanita?

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2010-1635

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2010-1642

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2010-3069

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-0719

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-2522

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-2694

** Changed in: samba (Ubuntu)
   Status: New = Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/932239

Title:
  Multiple Samba security vulnerabilities

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/932239/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 932239] Re: Multiple Samba security vulnerabilities

2012-02-17 Thread Steve Beattie
Also, you can check the status yourself of the CVEs we are aware of at
the Ubuntu Security cve tracker: http://people.canonical.com/~ubuntu-
security/cve/

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/932239

Title:
  Multiple Samba security vulnerabilities

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/932239/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 932239] Re: Multiple Samba security vulnerabilities

2012-02-16 Thread Dave Walker
** This bug has been flagged as a security vulnerability

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/932239

Title:
  Multiple Samba security vulnerabilities

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/932239/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs