=========================================================== 
Ubuntu Security Notice USN-617-1              June 17, 2008
samba vulnerabilities
CVE-2007-4572, CVE-2008-1105
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 7.04
Ubuntu 7.10
Ubuntu 8.04 LTS

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libsmbclient                    3.0.22-1ubuntu3.7
  samba                           3.0.22-1ubuntu3.7

Ubuntu 7.04:
  libsmbclient                    3.0.24-2ubuntu1.6
  samba                           3.0.24-2ubuntu1.6

Ubuntu 7.10:
  libsmbclient                    3.0.26a-1ubuntu2.4
  samba                           3.0.26a-1ubuntu2.4

Ubuntu 8.04 LTS:
  libsmbclient                    3.0.28a-1ubuntu4.2
  samba                           3.0.28a-1ubuntu4.2

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

Samba developers discovered that nmbd could be made to overrun
a buffer during the processing of GETDC logon server requests.
When samba is configured as a Primary or Backup Domain Controller,
a remote attacker could send malicious logon requests and possibly
cause a denial of service. (CVE-2007-4572)

Alin Rad Pop of Secunia Research discovered that Samba did not
properly perform bounds checking when parsing SMB replies. A remote
attacker could send crafted SMB packets and execute arbitrary code.
(CVE-2008-1105)


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:   157557 fe9e2732b425b7f66bbf2f0c2f391ae0
          Size/MD5:     1195 c3cf2c2244d8a11864871e609b26ff21
          Size/MD5: 17542657 5c39505af17cf5caf3d6ed8bab135036

  Architecture independent packages:

          Size/MD5:  6594316 b8e17603032332b72a8c08abc1e1f791
          Size/MD5:  6901872 030baeb10ef5d3067cc78699b378cfb6

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   426612 e0c9a528b0833b69f620e1e96d324824
          Size/MD5:   112498 e32dab2239d93ad2fba61ab9933fdbb5
          Size/MD5:   798384 0ac71263b56f0c77f8e499f4440d8de4
          Size/MD5:  5974180 fa8dcca578f97a9b8135678e6e81f019
          Size/MD5:  2414678 1caf130ff5aade8d5ba8ca1fc87df120
          Size/MD5: 11893522 ebe15227a1fcd3667231121e8f955757
          Size/MD5:  3404218 bb655baf4229ae4007ccb4f8760ef213
          Size/MD5:  4042412 e2f465634bcb4dda2c24f8b14c391d4c
          Size/MD5:   449446 1c151414e5df5981d096ed1d7af1b513
          Size/MD5:   833254 cfb48c12f6abfa583b2e3a161395f378
          Size/MD5:  1930394 b31e7d16ce1ee9e1a1b08e1d779facc1

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   366256 ecd984a2aef2fd6eafb31a6fc5fb7cc6
          Size/MD5:   112502 784975fadac9c7335578cf456aeee220
          Size/MD5:   683262 6847e63ac0fef6362fc3fb0d3ac48bb3
          Size/MD5:  5068136 d0adaedee70718edf910afa2da4023ca
          Size/MD5:  2078158 19313a1176545002543d994b3ed12759
          Size/MD5:  9811482 56d9533962927b713b4267144498ae85
          Size/MD5:  2851634 9d38fbc64126cd8958f1e061bd0f561b
          Size/MD5:  3353272 febf953ab25f6f32c2ce79fe195bbaac
          Size/MD5:   379488 662d5e476e8e8f406d29e3c3090cbef0
          Size/MD5:   711588 59c76ed08649542ce755cd6ebfcbcca5
          Size/MD5:  1609308 cfc3d273383abca59f8f18f2c61b8614

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   410316 398248c975173b0e65dc45b789aa5bec
          Size/MD5:   112504 01f6773639982a8ea2084bb6acb1bb14
          Size/MD5:   776598 94ca1939518ad875fb0809e9cdecbdae
          Size/MD5:  5692768 b8319ca70c2a2e8604cf7f2c16864fcb
          Size/MD5:  2358796 e2aeaf39980cd02e353e8d966bc24622
          Size/MD5: 11902934 9566073882fe68166ef19862ed4d8389
          Size/MD5:  3333966 de9cdb770920ed2613335df082e31a1d
          Size/MD5:  3942318 56e7f3a2db58069e8a1a38501470dd8b
          Size/MD5:   442512 2438aabf1df17c94c90d7c9211323165
          Size/MD5:   814006 853b23651a8dcf2f1ec24dd5a648291b
          Size/MD5:  1873364 58b5cdf48fc88a21fded595146013be0

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   389350 5b0fc4d9896782ffdedd34c85b16e4ab
          Size/MD5:   112508 6e973df2ece59a53ce39ea1df11023b1
          Size/MD5:   730056 7ca081806c5403137978ca6c0a93616b
          Size/MD5:  5426374 222f6c0062f175094a3e830d62cdfcad
          Size/MD5:  2145286 ee8eea2fdaed48316f9b1718dba8f875
          Size/MD5:  9723868 f11992c23c77cde6fea36f274bcad06c
          Size/MD5:  2992460 001c4848b6e6a958f75f70f6fc8522ca
          Size/MD5:  3507392 e1a34b414a28669f4623ce344b9b0fbb
          Size/MD5:   399398 4adfe57d68743087cd8d64674aa8fab4
          Size/MD5:   736734 d0b73b4cfedd8e75ac494301fd62d1ad
          Size/MD5:  1691148 b871641405c5d1a77b063f61f3a77c48

Updated packages for Ubuntu 7.04:

  Source archives:

          Size/MD5:   218095 fe523b2c7e2ecc3b2628959ee8c24d35
          Size/MD5:     1491 bdc03de46d647f7e6848bb4a77f891d1
          Size/MD5: 17708128 89273f67a6d8067cbbecefaa13747153

  Architecture independent packages:

          Size/MD5:  6603280 851f3f4b0e2cd8a565dbf91ee9644cd8
          Size/MD5:  6917620 133cba00a2c8ca43ef9ea4c9dfc7e506

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   482402 be3654582c89c00bc64ea44ed5e175b2
          Size/MD5:   116598 3db17fe5b9795c4e7d5c30a0b9cabc3d
          Size/MD5:   868916 e42a987ff39ed8bceaba078a21ce7406
          Size/MD5:  6499116 94fe2f0ecb4c33c4dd1943d0787fd276
          Size/MD5:  2691826 102764718a9f9774fcb6329a883d314f
          Size/MD5: 12265568 2aaebb27c9ae37ad83802c20ee40a43a
          Size/MD5:  3758452 62897be3049c511488fae8bb05eba2fb
          Size/MD5:  4516408 9278b50249741d1033c98b9e88d86f81
          Size/MD5:   479924 3e0eace4437ac3cb8c27bf65be3ca0de
          Size/MD5:   904728 79911e78b5a3d2dca1922668c5d00bf7
          Size/MD5:  2165312 48443a011d785a3e3369f96b35b1b394

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   435962 99dc39abd0cbccb06b825a961377afc3
          Size/MD5:   116600 92b73290100b4ffe3fc10d874428a239
          Size/MD5:   794454 71999651c44a2710f7faf5e75df79fae
          Size/MD5:  5909502 8ccf31f03b5730b8f22274ba12db6aab
          Size/MD5:  2438472 9e99a9595c21e1787e390e3066a2dfac
          Size/MD5: 11860898 efc9278f00ce5ef7ed1bf15bbe4949f7
          Size/MD5:  3342496 13acc72d6cb6eba183732710e075e8b7
          Size/MD5:  4017040 1880d1549a6807f91915544a7ba7d0fb
          Size/MD5:   427686 454e6b2bb66e1d07f582dff8ec076af8
          Size/MD5:   820396 0e99df642321b6acb536d224cad35adf
          Size/MD5:  1925876 b53840255075901b84ece4265e4043ad

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   478266 08a2b2d32343ee33446a8c34defa364d
          Size/MD5:   116598 7e739d52a9d151f4c43253cca1a9398f
          Size/MD5:   859578 345918e71d4e0d4f1b61c1cd32e415a7
          Size/MD5:  6536952 25c93fc911cda8ee78d3600f796a2f12
          Size/MD5:  2653726 d62bd096cb80dfd09abf82b266c7e9d6
          Size/MD5: 12574000 c11f6af719774d6e7f6698e67889a4f1
          Size/MD5:  3727470 529624ccb505d72d1e0e8f99b7803baa
          Size/MD5:  4455138 0290d22007b5081510a00391452ab6f0
          Size/MD5:   487560 7fded0eba77f9c6393e8f6dd31e1cf50
          Size/MD5:   894004 1be5ed9dcd197be6ab7d2f618f9648fc
          Size/MD5:  2145214 d54133b49cc085aceb1596ae3162fab8

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   442538 6f6ee761826c7351853949bbe1b4fdf5
          Size/MD5:   116606 738424af3598a9a214b297028ab938e7
          Size/MD5:   796860 fe97c7b340f90e0213ef9d6e4933068e
          Size/MD5:  5933320 65b266f70f316a764838793ec4e91036
          Size/MD5:  2408884 94006c5e42cf43a7ab51e2222b8b5368
          Size/MD5: 10880780 8acd3b96f2240ab29264dda8360cdb44
          Size/MD5:  3346394 5f55994d73a5b0a4c3904ff823a5ed6d
          Size/MD5:  3963758 377139acfee0ff78534b4bff43a83488
          Size/MD5:   436460 aa52c28b010ce24bad761eea28602ebb
          Size/MD5:   805708 cd220c29769a99703beaf92906f08ec1
          Size/MD5:  1923230 2076805e0bee0d748ae624c18c8dd477

Updated packages for Ubuntu 7.10:

  Source archives:

          Size/MD5:   205232 cac034c509c02409168864290cd94ab2
          Size/MD5:     1430 be928b465fdb68f8a9c5decd5505b603
          Size/MD5: 18180031 16b47e6add332e5ac4523fc88c381d06

  Architecture independent packages:

          Size/MD5:  6615664 2318167e796e7ed20c185eca6e963cc2
          Size/MD5:  6980306 1a82e5024035a2e9a565fd05ab02d8be

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   513556 64fc3909a740a527a2bdc971b0ea1538
          Size/MD5:  1286670 069246dc9f3a04d17494fd4224320625
          Size/MD5:   960956 d06caac04e311b8bb8c23e848c30dead
          Size/MD5:  3039594 742f3d5bb54ed0b49c51ac92d27724e8
          Size/MD5: 20867590 98f9429294b1b8a5595f90428b5e7731
          Size/MD5:  4180500 be9d648d3516440228bf3ba387ce566e
          Size/MD5:  5289850 c89fbc894512fd74646698f8d835fa4e
          Size/MD5:   527616 405468d0f99b545aaeaf1abdd9bb1e74
          Size/MD5:  1041692 2867494f6bac4441f623453054ad8a37
          Size/MD5:  2461260 e9c96a6a098a556f74828116e5ffa362

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   465828 6adc63d7e480dc53f4100e962b026728
          Size/MD5:  1201598 7fe7c59500dc1d9c1682492c02870526
          Size/MD5:   885396 65e53abd805bf777a4566620636a4205
          Size/MD5:  2835916 257a54d895173457e6cb5f761f65066b
          Size/MD5: 20137010 4897691c0265dc5858b7ac26a2f71e41
          Size/MD5:  3842272 17b79e409ef3c0fa105edf69e5b14ac0
          Size/MD5:  4887422 937ff250a258a9d2e1488a5370d6cde4
          Size/MD5:   485704 cc7b1b48e151053f3248ef842a85db0b
          Size/MD5:   974084 9af935c96bc56a7739caccf38d53bd5f
          Size/MD5:  2243174 8005b8580a97a4bc40a530d9125cccd2

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   455238 c15478e056db18a81b1f03fafb351682
          Size/MD5:  1160208 9cb4c5bc20698cb431f46340877e3e90
          Size/MD5:   856454 81c39a5be786ae3311c2becfec7875a9
          Size/MD5:  2755678 11abcaafc15398c364ecb7d446b08559
          Size/MD5: 20644032 6cff99dfc3e3ff671a3aa146a4654248
          Size/MD5:  3737080 18efb1dc683c5cf673c2710faf87e3b1
          Size/MD5:  4719462 47bf3d100fcd6577cde40b4324d56f08
          Size/MD5:   475254 d3591b07b76c95ae887ffdb7ca9f38f5
          Size/MD5:   943078 5c7c307a4125a1e4598fd87024f3c4d6
          Size/MD5:  2179888 8ccef8867a7f97d54af2a249d7503c1f

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   508974 3448356949c03b4b95ff53fecbc8598e
          Size/MD5:  1207972 930074911ad42444ce4479d44a047c34
          Size/MD5:   961342 30d46285490a17f985ae4dbc3b48f4d6
          Size/MD5:  2985534 5130ddf69e688b82f93a4e0bbc3e6596
          Size/MD5: 21449182 8b1041a01f3fa4a65b23acd52ba79540
          Size/MD5:  4122940 5e8dc676bdc726b24a880aa18b8e017e
          Size/MD5:  5200604 f993ee31b1e331cf4adfa4a5075151d5
          Size/MD5:   533482 dc88455cde09e591c8944014e4615a51
          Size/MD5:  1019044 6d7b399b36b1caf30ed49950a0994466
          Size/MD5:  2416362 0c457743af51ac7d7b2ae9a0b589e536

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   472222 3776dae18e89b067295a8947e306c17e
          Size/MD5:  1280202 1cd697b0677f0ce0b2c8e16be5e5a783
          Size/MD5:   889110 a8221d1100fb8cccac61765f6b807489
          Size/MD5:  2802276 7dd8a77202261b122b3c4896480435cf
          Size/MD5: 18681332 bf2b67e612b46251ad93a5844810b704
          Size/MD5:  3852422 20a4d3e4f89d99a106f2a2d05eb0cacc
          Size/MD5:  4822622 bd27cd58e2e1f938b7a699531021e96c
          Size/MD5:   493612 d313e8e2ebbd23db522c5e07a579ef91
          Size/MD5:   957900 3f581dc784d34d4d53252c09086b4ba8
          Size/MD5:  2241368 1b91b226a683cc45ac2ce16fc6142136

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

          Size/MD5:   219079 104233ce83b0e2e6b639077f234bbdf6
          Size/MD5:     1438 5f5597b6949cc490e4a0f93f2a75f55d
          Size/MD5: 18172643 59754cb0c19da6e65c42d0a163c5885a

  Architecture independent packages:

          Size/MD5:  6621122 ebf89e4ef5422bd45d22d7a1fb0ea6bf
          Size/MD5:  7007956 c51614868f26344c753ea812f08cbe62

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   519286 8029cd6dd8dd7c1d4f544c843d7e2550
          Size/MD5:  1291242 771158f55489935f0a32e4715cf59398
          Size/MD5:   966600 576f7b7935b05be6f405dd447078b7d8
          Size/MD5:  3057350 cc960e635eb02f0127ac39c9820fd6e9
          Size/MD5: 20881788 db489d1fe43096c2243e7cf845408d6f
          Size/MD5:  4193096 1aa0b09fbfcbc8556643efaaf374b5df
          Size/MD5:  5302816 aa187791f04829679966e978ec62211b
          Size/MD5:    94320 d8f06b8b2b71f45225b8531442576f55
          Size/MD5:  1047504 6227f10117b98de0cd45263a40953885
          Size/MD5:  2471152 0c30ef525563addf7f159c9ba3df0eff

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   470974 0d8d505e3347349dce0f5fc0fcc6d6c1
          Size/MD5:  1200726 9753c32962f998c68c5a5fd1414ff7ac
          Size/MD5:   886064 0f1e833105f806384509c342af726deb
          Size/MD5:  2838860 b1298e1dc3041f97167293f916d9e49f
          Size/MD5: 20202542 176facc8f55076d397398fa4de5351ed
          Size/MD5:  3838854 24a757c9e0e31b2514cb53feefd8ba08
          Size/MD5:  4862584 d85b5b0465a0b7f147befc393209ac3c
          Size/MD5:    93622 1c4ea65ebc6e6af313f1dbfd6abd738e
          Size/MD5:   973258 b5105575fba40e3337230dc37ab8cfb1
          Size/MD5:  2247180 98af7db7058f1f342abed3720f681473

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   461902 7de6476c2d787f6221b4f5c0193fbea4
          Size/MD5:  1166930 ba1aae4353728a42a17e4ab1feee05db
          Size/MD5:   863224 8f269f2e0aa40a573fb4656c105f6faa
          Size/MD5:  2777782 3156ee552bb60ecbbbce6816b0d80733
          Size/MD5: 20578682 dbaf8eb73d09836a51d1b4d74a4da2a9
          Size/MD5:  3755172 406f54027643c771941ab9972a51d48c
          Size/MD5:  4733024 041e3740f0aaa2a65bec9e11d78eb0e7
          Size/MD5:    93732 df2e0793457ea164056295e0c72ab176
          Size/MD5:   949858 49f84cdf158e90d31583a26392168fea
          Size/MD5:  2194056 b35f852217983fa7edebc759084c38a8

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   514502 72734738539019bae9c53a05ee08ba14
          Size/MD5:  1198664 ee7d5a37fd0634eacf44f7061313d923
          Size/MD5:   955278 d91d84c721032fd9cd150793dd6824bd
          Size/MD5:  2989556 11278af4f617e2b2c021315f09bf71f7
          Size/MD5: 21171358 dc04cef4c1feff94bad92889d6d65e55
          Size/MD5:  4124142 e747c1048ccbca854b6cf269d8d13711
          Size/MD5:  5161236 aa6f7906597e5e4d65406de39f57c4c3
          Size/MD5:    97830 7712f1ea886f96f03e3bb675310da020
          Size/MD5:  1016768 9d642ff91d637eda60d0b89de92bba82
          Size/MD5:  2418562 11f6f66eceadda209ed2dc44b6e442f2

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   473378 e4b2b8231bc28f6eeb84bb6a98e36a70
          Size/MD5:  1262890 4f30f25246cbe1fdc4dce220aae31d40
          Size/MD5:   880986 fa7ef83447869b5e18b5f9ae3d5fd571
          Size/MD5:  2778828 9c3afd0fae84fe8b8298861f436965c3
          Size/MD5: 18512300 55cf9b4eac539ae6f80a910af0c31889
          Size/MD5:  3801336 4bc554c65984031c21ba9dd897f6828c
          Size/MD5:  4741698 66eabdd16920823713cf6f4e310f1c26
          Size/MD5:    94454 2e1c1dc4db2ead3404399cb439bd9e47
          Size/MD5:   946896 95aad68fec4734b612e03b13807bf748
          Size/MD5:  2216590 0c551945d0ac50b93c006d3b40a5e398