CVS commit: pkgsrc/net/samba

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Tue Jun 24 14:06:30 UTC 2014

Modified Files:
        pkgsrc/net/samba: Makefile distinfo

Log Message:
Update samba to 3.6.24, security release.

                   ==============================
                   Release Notes for Samba 3.6.24
                           June 23, 2014
                   ==============================

This is a security release in order to address
CVE-2014-0244 (Denial of service - CPU loop) and
CVE-2014-3493 (Denial of service - Server crash/memory corruption).

o  CVE-2014-0244:
   All current released versions of Samba are vulnerable to a denial of
   service on the nmbd NetBIOS name services daemon. A malformed packet
   can cause the nmbd server to loop the CPU and prevent any further
   NetBIOS name service.

   This flaw is not exploitable beyond causing the code to loop expending
   CPU resources.

o  CVE-2014-3493:
   All current released versions of Samba are affected by a denial of service
   crash involving overwriting memory on an authenticated connection to the
   smbd file server.


To generate a diff of this commit:
cvs rdiff -u -r1.250 -r1.251 pkgsrc/net/samba/Makefile
cvs rdiff -u -r1.99 -r1.100 pkgsrc/net/samba/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.