ERRATA: Re: Samba Security Announcement -- Potential Arbitrary File Access

Gerald (Jerry) Carter jerry at samba.org
Mon Oct 4 07:33:53 GMT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

JG wrote:
| On Thu, 30 Sep 2004 05:18:30 -0500
| "Gerald (Jerry) Carter" <jerry at samba.org> wrote:
|
|
|> The patch for Samba 3.0.5 and earlier releases
|> (samba-3.0.5-reduce_name.patch) can be downloaded
|> from http://download.samba.org/samba/ftp/patches/security/
|
|
| hm, is the 3.0.5 patch supposed to apply to v3.0.5, or is it
| just me? downloaded a clean 3.0.5 source and i can't find
| where the patch should apply in vfs.c.  a "grep leading
| source/smbd/*"  also doesn't show up the comment that is
| in the patch and should be in the source.

<wipes egg off face>
The 3.0.5 reduce_name patch is not for 3.0.5.  That was the patch
for 2.2.11.  Sorry.  I'm working on getting a proper patch for
<= 3.0.5




cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFBYPzhIR7qMdg1EfYRAqAjAJ4+gjPVyrI2NhkqeNQ8x0LohG79FACgptpA
TV+dffszw+D4qzfxsNaJAMc=
=20Td
-----END PGP SIGNATURE-----



More information about the samba-technical mailing list