samba (3.0.27a-1ubuntu1) hardy; urgency=low

  * Merge from debian unstable (LP: #165072), remaining changes:
    * debian/patches/VERSION.patch:
      - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu
    * debian/control:
      - Remove type-handling (not used in Ubuntu)
    * debian/rules:
      - Remove type-handling.
    * debian/samba.init:
      - Ubuntu's log_progress_msg is a no-op, so to avoid confusion, don't
        say specifically which daemons we're handling. (LP #25803)
    * debian/smb.conf:
      - Add "(Samba, Ubuntu)" to server string.
      - Comment out the default [homes] shares and add more verbose comments to
        explain what they do and how they work (LP #27608). Also, add a
        comment about "valid users = %S" to show users how to restrict access
        to \\server\username to only username.
      - default passwd chat value is modified
    * debian/panic-action:
      - Alter the panic-action script to link to the samba bug reporting page
        on Launchpad.
    * debian/samba-common.config:
      - do not change priority to HIGH if dhclient3 is installed
      - use priority medium instead of high for the workgroup question
    * Set Ubuntu maintainer address.
  * Bugs fixed in Debian:
    - Enable net usershare (LP: #128548)
  * Ubuntu patches merged in Debian:
    * debian/smb.conf:
      - "printer admin" is a deprecated option, and is dropped
        completely from the examples.
    * debian/samba-common.templates:
      - Default workgroup value is now set to WORKGROUP; this is a
        change from previous Ubuntu versions which used MSHOME, but is
        consistent with the Samba upstream defaults and the default
        behavior for most versions of Windows.
  * Ubuntu patches dropped:
    * debian/rules:
      - Samba should not use --error-handler=true for its init script.
    * debian/samba-common.templates, debian/po/*.po:
      - unnecessary divergence from Debian debconf template which
        resulted in fuzzy translations; this is cleaned up now

samba (3.0.27a-1) unstable; urgency=low

  [ Steve Langasek ]
  * New upstream release
    - fix regression with smbfs clients, introduced by the security fix in
      3.0.27.  Closes: #451839.
    - debian/patches/cifs-umount-trailing-slashes.patch: merged upstream.
  * Drop the deprecated "printer admin" example from the default smb.conf.
    Closes: #451273.
  * Add a *new* debian/patches/cups.patch to *enable* cups as the default
    printing system, because since the original introduction of this patch
    in Debian there was a regression upstream that caused cups to never be
    selected as the default print system.
  * Set the default value for the workgroup question to "WORKGROUP" in
    samba-common.templates, not just in the template smb.conf, so that the
    debconf question comes out right every time; and always treat this
    as a high-priority debconf question instead of selecting the
    priority based on whether there's an existing value, since there's
    now *always* an existing value but the value doesn't tell us
    anything meaningful about the user's preference.  Closes: #451271.
  * Drop some code from samba.postinst that only applies to upgrades from
    pre-3.0 (i.e., pre-sarge) packages

  [ Christian Perrier ]
  * Update the "built by" part of README.debian
  * Remove the very outdated parts of README.debian

samba (3.0.27-1) unstable; urgency=low

  * New upstream version
    - fixes a remote code execution vulnerability when running nmbd as a
      WINS server. (CVE-2007-5398; closes: #451385)
    - fixes a buffer overflow in nmbd when running as a domain controller
      during processing of GETDC logon server requests. (CVE-2007-4572)

  [ Steve Langasek ]
  * fhs.patch: net usershares should also be stored under /var/lib, not under
    /var/run.  No transition handling in maintainer scripts, since this
    feature is not activated by default.
  * get_global_sam_sid-non-root.patch: avoid calling get_global_sam_sid()
    from smbpasswd -L or pam_smbpass when running as non-root, to avoid a
    foreseeable panic.  Closes: #346547, #450738.
  * usershare.patch: enable "user shares" by default in the server with a
    default limit of 100, to support user shares on both upgrades and new
    installs with no need to munge config files.  Thanks to Mathias Gug
    <[EMAIL PROTECTED]> for the patch.  Closes: #443230.
  * On Ubuntu, support autopopulating the sambashare group using the existing
    members of the admin group; no equivalent handling is done on Debian,
    because there doesn't seem to be an appropriate template group we can use
    that wouldn't be considered a privilege escalation for those users.
  * Update Samba to explicitly use the C locale when doing password changes,
    to account for Linux-PAM's recently adopted i18n support.
    Closes: #451272.
  * Enforce creation of the pid directory (/var/run/samba) in the samba
    init script, for compatibility with systems that use a tmpfs for
    /var/run.  Closes: #451270.
  * debian/patches/cups.patch, debian/NEWS: drop the patch to force bsd
    as the default printing system, as CUPS is now the dominant/default
    printing system for Linux.

  [ Debconf translations ]
  * Hebrew added. Closes: #444054

  [ Christian Perrier ]
  * Split fhs.patch into 3 separate patches to make upstream integration
    easier:
    - fhs-newpaths.patch: introduce new paths
    - fhs-filespaths.patch: assign files to new paths
    - fhs-assignpaths.patch: assign paths to FHS-compatible locations
  * Compile with DNS update support. Thanks to Matthias Gug for
    reporting and contributions from Launchpad's #156686
    Closes: #449422

 -- Steve Langasek <[EMAIL PROTECTED]>   Sun, 25 Nov 2007
12:56:27 -0800

** Changed in: samba (Ubuntu)
       Status: In Progress => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2007-4572

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2007-5398

-- 
please merge samba 3.0.27a-1 (main) from Debian unstable (main)
https://bugs.launchpad.net/bugs/165072
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to