Re: Question - Latest security alery of samba

2003-03-16 Thread Alexander Bokovoy
On Sun, Mar 16, 2003 at 04:27:04PM +0200, Nir Livni wrote: Hi all, Just wanted to know if the latest security alert is all about quotas.c. An upgrade (for me) is a bit problematic at the moment. If I patch this specific source code myself and recompile smbd - is it (basically) enough ? No, it

RE: Question - Latest security alery of samba

2003-03-16 Thread Nir Livni
, March 16, 2003 4:31 PM To: Nir Livni; [EMAIL PROTECTED] Subject: Re: Question - Latest security alery of samba On Sun, Mar 16, 2003 at 04:27:04PM +0200, Nir Livni wrote: Hi all, Just wanted to know if the latest security alert is all about quotas.c. An upgrade (for me) is a bit problematic

RE: Question - Latest security alery of samba

2003-03-16 Thread Richard Sharpe
On Sun, 16 Mar 2003, Nir Livni wrote: I've read the announcement carefully. The announcement does not point a specific threat in the samba code. It mentions that This version of Samba adds explicit overrun and overflow checks on fragment re-assembly of SMB/CIFS packets to ensure that only

RE: Question - Latest security alery of samba

2003-03-16 Thread Nir Livni
To: Nir Livni Cc: [EMAIL PROTECTED] Subject: RE: Question - Latest security alery of samba On Sun, 16 Mar 2003, Nir Livni wrote: I've read the announcement carefully. The announcement does not point a specific threat in the samba code. It mentions that This version of Samba adds explicit overrun

Re: Question - Latest security alery of samba

2003-03-16 Thread jra
On Sun, Mar 16, 2003 at 05:54:17PM +0200, Nir Livni wrote: Any list of affected source files would be appreciated. I have replied to Nir privately off-list. Jeremy.