K 10 svn:author V 6 trevor K 8 svn:date V 27 2003-03-15T21:48:17.000000Z K 7 svn:log V 677 Update to 2.2.8, which was released today with this note on the Samba Web site: A flaw has been detected in the Samba main smbd code which could allow an external attacker to remotely and anonymously gain Super User (root) privileges on a server running a Samba server. This flaw exists in previous versions of Samba from 2.0.x to 2.2.7a inclusive. This is a serious problem and all sites should either upgrade to Samba 2.2.8 immediately or prohibit access to TCP ports 139 and 445. I tested this in the same environment as before. This should be fetchable too. Requested by: dwcjr (maintainer) pointy hat to: my collection END