Subject: CVS commit: pkgsrc/net/samba33
From: Takahiro Kambe
Date: 2010-09-14 15:08:23
Message id: 20100914130823.8A9B2175DD@cvs.netbsd.org

Log Message:
Update samba33 package to 3.3.14.

                   ==============================
                   Release Notes for Samba 3.3.14
		         September 14, 2010
                   ==============================

This is a security release in order to address CVE-2010-3069.

o  CVE-2010-3069:
   All current released versions of Samba are vulnerable to
   a buffer overrun vulnerability. The sid_parse() function
   (and related dom_sid_parse() function in the source4 code)
   do not correctly check their input lengths when reading a
   binary representation of a Windows SID (Security ID). This
   allows a malicious client to send a sid that can overflow
   the stack variable that is being used to store the SID in the
   Samba smbd server.

Files:
RevisionActionfile
1.11modifypkgsrc/net/samba33/Makefile
1.5modifypkgsrc/net/samba33/distinfo