[pkgsrc/pkgsrc-2011Q2]: pkgsrc/net/samba35 Pullup ticket #3478 - requested by...

[sbd <sbd%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/6a0bc2d3e65e
branches:  pkgsrc-2011Q2
changeset: 590231:6a0bc2d3e65e
user:      sbd <sbd%pkgsrc.org@localhost>
date:      Wed Jul 27 06:37:42 2011 +0000

description:
Pullup ticket #3478 - requested by taca
net/samba35 security update.

Revisions pulled up:
- net/samba35/Makefile                                          1.8
- net/samba35/distinfo                                          1.5

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Wed Jul 27 00:52:20 UTC 2011

   Modified Files:
        pkgsrc/net/samba35: Makefile distinfo

   Log Message:
   Update samba35 pacakge to 3.5.10; security fix for swat.

                      ==============================
                      Release Notes for Samba 3.5.10
                           July 26, 2011
                      ==============================

   This is a security release in order to address
   CVE-2011-2522 (Cross-Site Request Forgery in SWAT) and
   CVE-2011-2694 (Cross-Site Scripting vulnerability in SWAT).

   o  CVE-2011-2522:
      The Samba Web Administration Tool (SWAT) in Samba versions
      3.0.x to 3.5.9 are affected by a cross-site request forgery.

   o  CVE-2011-2694:
      The Samba Web Administration Tool (SWAT) in Samba versions
      3.0.x to 3.5.9 are affected by a cross-site scripting
      vulnerability.

   Please note that SWAT must be enabled in order for these
   vulnerabilities to be exploitable. By default, SWAT
   is *not* enabled on a Samba install.

   Changes since 3.5.9:
   --------------------

   o   Kai Blin <kai%samba.org@localhost>
       * BUG 8289: SWAT contains a cross-site scripting vulnerability.
       * BUG 8290: CSRF vulnerability in SWAT.

diffstat:

 net/samba35/Makefile |  4 ++--
 net/samba35/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (34 lines):

diff -r e737093e3b92 -r 6a0bc2d3e65e net/samba35/Makefile
--- a/net/samba35/Makefile      Thu Jul 21 04:29:04 2011 +0000
+++ b/net/samba35/Makefile      Wed Jul 27 06:37:42 2011 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.7 2011/06/15 11:45:08 adam Exp $
+# $NetBSD: Makefile,v 1.7.2.1 2011/07/27 06:37:42 sbd Exp $
 
 .include "../../net/samba/Makefile.mirrors"
 
@@ -11,7 +11,7 @@
 COMMENT=       SMB/CIFS protocol server suite
 LICENSE=       gnu-gpl-v3
 
-VERSION=       3.5.9
+VERSION=       3.5.10
 CONFLICTS+=    ja-samba-[0-9]* pam-smbpass-[0-9]* tdb-[0-9]* winbind-[0-9]*
 
 PKG_DESTDIR_SUPPORT=   user-destdir
diff -r e737093e3b92 -r 6a0bc2d3e65e net/samba35/distinfo
--- a/net/samba35/distinfo      Thu Jul 21 04:29:04 2011 +0000
+++ b/net/samba35/distinfo      Wed Jul 27 06:37:42 2011 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.4 2011/06/15 11:45:08 adam Exp $
+$NetBSD: distinfo,v 1.4.2.1 2011/07/27 06:37:42 sbd Exp $
 
-SHA1 (samba-3.5.9.tar.gz) = 77da3dff05032950fa1943057182d16894591a05
-RMD160 (samba-3.5.9.tar.gz) = c48b3d0ecf0b4cde2764cebdde5f8513320cd966
-Size (samba-3.5.9.tar.gz) = 30750297 bytes
+SHA1 (samba-3.5.10.tar.gz) = de63b1a7e2fa6bcae91dbf7d2cbdfb38d0f97c00
+RMD160 (samba-3.5.10.tar.gz) = 8dd4c500b0c967d70e750830443ea3c4f1d864b9
+Size (samba-3.5.10.tar.gz) = 30753696 bytes
 SHA1 (patch-ab) = 0372ff2e3caca866dacd6ed25ae1d02e34a5b567
 SHA1 (patch-ac) = 5b1c0fdb781cb75f81af71ed2695144d4a35e032
 SHA1 (patch-ad) = 447aaf4ea4cc98f0ccd5a3a22e1ffec0e69a3971