K 10
svn:author
V 5
timur
K 8
svn:date
V 27
2009-06-26T00:35:25.000000Z
K 7
svn:log
V 556
Security update of net/samba32 to the 3.2.13 version.

   o CVE-2009-1886:
     In Samba 3.2.0 to 3.2.12 (inclusive), the smbclient commands dealing
     with file names treat user input as a format string to asprintf.
     With a maliciously crafted file name smbclient can be made
     to execute code triggered by the server.

   o CVE-2009-1888:
     In Samba 3.0.31 to 3.3.5 (inclusive), an uninitialized read of a data
     value can potentially affect access control when "dos filemode"
     is set to "yes".

Security:	CVE-2009-1886, CVE-2009-1888

END