Re: [SECURITY] Samba 2.2.8a security available for download

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 7 Apr 2003, Gerald (Jerry) Carter wrote:

> This release provides an important security fix outlined in the
> release notes that follow. This is the latest stable release of
> Samba and the version that all production Samba servers should be
> running for all current bug-fixes.
> 
> The source code can be downloaded from :
> 
>     http://download.samba.org/samba/ftp/
> 
> in the file samba-2.2.8a.tar.gz or samba-2.2.8a.tar.bz2.
> Both archives have been signed using the Samba Distribution Key
> (available in the samba directory on the web server).

This is the announcement from Digital Defense that went out to 
BUGTRAQ this morning.  

      http://www.digitaldefense.net/labs/advisories/DDI-1013.txt

I will remind people that there is a published exploit for 
this bug so patching your servers should be top priority today.  
Our apologies for the past two security issues.





cheers, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
                            --John Cusack - "Grosse Point Blank" (1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+kXMlIR7qMdg1EfYRAq4cAKCens31U9NBqo+zW8GzmwlHs3G8eQCg8g7l
KA+fvNYaHfukJ0sJGi94P4w=
=pY2g
-----END PGP SIGNATURE-----