cvs commit: ports/net/samba3 Makefile distinfo pkg-plist pkg-plist.swat ports/net/samba3/files patch-Makefile.in patch-configure.in patch-include_includes.h patch-modules_vfs_posixacl.c patch-nsswitch_pam_winbind.c patch-pam_smbpass_pam_smb_auth.c patch-pam_smbpass_pam_smb_passwd.c ...

[Kirill Ponomarew]

krion       2007-05-24 07:54:26 UTC

  FreeBSD ports repository

  Modified files:
    net/samba3           Makefile distinfo pkg-plist 
                         pkg-plist.swat 
    net/samba3/files     patch-Makefile.in patch-configure.in 
                         patch-include_includes.h 
                         patch-nsswitch_pam_winbind.c 
                         patch-pam_smbpass_pam_smb_auth.c 
                         patch-pam_smbpass_pam_smb_passwd.c 
                         patch-pam_smbpass_support.c 
                         patch-script_installbin.sh.in 
                         patch-script_installswat.sh 
                         patch-smbd_aio.c patch-smbd_statvfs.c 
                         patch-utils_net_time.c 
  Added files:
    net/samba3/files     patch-modules_vfs_posixacl.c 
                         patch-python_setup.py 
  Removed files:
    net/samba3/files     patch-zb 
  Log:
  An update of net/samba3 to the 3.0.25 version plus security fixes.
  
  Major features included in the 3.0.25 code base are:
  
    o Significant improvements in the winbind off-line logon support.
    o Support for secure DDNS updates as part of the 'net ads join'
      process.
    o Rewritten IdMap interface which allows for TTL based caching and
      per domain backends.
    o New plug-in interface for the "winbind nss info" parameter.
    o New file change notify subsystem which is able to make use of
      inotify on Linux.
    o Support for passing Windows security descriptors to a VFS
      plug-in allowing for multiple Unix ACL implements to running
      side by side on the Same server.
    o Improved compatibility with Windows Vista clients including
      improved read performance with Linux servers.
    o Man pages for IdMap and VFS plug-ins.
  
  Security Fixes included in the Samba 3.0.25 release are:
  
    o CVE-2007-2444
          Versions: Samba 3.0.23d - 3.0.25pre2
          Local SID/Name translation bug can result in
          user privilege elevation
  
    o CVE-2007-2446
          Versions: Samba 3.0.0 - 3.0.24
          Multiple heap overflows allow remote code execution
  
    o CVE-2007-2447
          Versions: Samba 3.0.0 - 3.0.24
          Unescaped user input parameters are passed as
          arguments to /bin/sh allowing for remote command
          execution
  
  PR:             ports/112836
  Submitted by:   maintainer
  Approved by:    portmgr (self)
  
  Revision  Changes    Path
  1.158     +16 -5     ports/net/samba3/Makefile
  1.75      +3 -3      ports/net/samba3/distinfo
  1.9       +6 -5      ports/net/samba3/files/patch-Makefile.in
  1.20      +142 -64   ports/net/samba3/files/patch-configure.in
  1.4       +3 -3      ports/net/samba3/files/patch-include_includes.h
  1.1       +15 -0     ports/net/samba3/files/patch-modules_vfs_posixacl.c (new)
  1.4       +7 -16     ports/net/samba3/files/patch-nsswitch_pam_winbind.c
  1.2       +2 -2      ports/net/samba3/files/patch-pam_smbpass_pam_smb_auth.c
  1.2       +2 -2      ports/net/samba3/files/patch-pam_smbpass_pam_smb_passwd.c
  1.2       +2 -2      ports/net/samba3/files/patch-pam_smbpass_support.c
  1.3       +11 -0     ports/net/samba3/files/patch-python_setup.py (new)
  1.2       +2 -2      ports/net/samba3/files/patch-script_installbin.sh.in
  1.5       +2 -2      ports/net/samba3/files/patch-script_installswat.sh
  1.2       +3 -3      ports/net/samba3/files/patch-smbd_aio.c
  1.2       +3 -3      ports/net/samba3/files/patch-smbd_statvfs.c
  1.3       +3 -3      ports/net/samba3/files/patch-utils_net_time.c
  1.2       +0 -26     ports/net/samba3/files/patch-zb (dead)
  1.68      +26 -1     ports/net/samba3/pkg-plist
  1.2       +24 -0     ports/net/samba3/pkg-plist.swat