I see a fix for this was checked into the pkgsrc trunk on 10-Dec. Has this been requested for pullup into pkgsrc-2007Q3? Could that be done?
Thanks much... - Chris Begin forwarded message:
From: Charlie Root Date: December 21, 2007 03:15:59 EST To: root Subject: daily insecurity output for Fri Dec 21 03:15:00 EST 2007 Running /etc/security.local:Package samba-3.0.26anb2 has a remote-code-execution vulnerability, see http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6015