CVS commit: pkgsrc/net/samba33

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Wed Jul 27 00:53:37 UTC 2011

Modified Files:
        pkgsrc/net/samba33: Makefile distinfo
        pkgsrc/net/samba33/patches: patch-af

Log Message:
Update samba33 package to 3.3.16; security fix for swat.

                   ==============================
                   Release Notes for Samba 3.3.16
                           July 26, 2011
                   ==============================

This is a security release in order to address
CVE-2011-2522 (Cross-Site Request Forgery in SWAT) and
CVE-2011-2694 (Cross-Site Scripting vulnerability in SWAT).

o  CVE-2011-2522:
   The Samba Web Administration Tool (SWAT) in Samba versions
   3.0.x to 3.5.9 are affected by a cross-site request forgery.

o  CVE-2011-2694:
   The Samba Web Administration Tool (SWAT) in Samba versions
   3.0.x to 3.5.9 are affected by a cross-site scripting
   vulnerability.

Please note that SWAT must be enabled in order for these
vulnerabilities to be exploitable. By default, SWAT
is *not* enabled on a Samba install.

Changes since 3.3.15
--------------------

o   Kai Blin <kai%samba.org@localhost>
    * BUG 8289: SWAT contains a cross-site scripting vulnerability.
    * BUG 8290: CSRF vulnerability in SWAT.


To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.15 pkgsrc/net/samba33/Makefile
cvs rdiff -u -r1.6 -r1.7 pkgsrc/net/samba33/distinfo
cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/net/samba33/patches/patch-af

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.