Security-Fix Samba 2.2.8 Available For Download

Jeremy Allison, Samba Team. writes "I just wanted to give you a heads-up on a security release, Samba 2.2.8. The release notes may be found here: http://samba.org/samba/whatsnew/samba-2.2.8.html It is important that Samba users upgrade or take the security steps outlined in the release notes. We have a report an exploit has been developed by the black-hat community. Regards, Jeremy"

Black hat community

[IXI]

Black hat? Never heard of that distro

SCNR

Re:

[account_deleted]

Comment removed based on user account deletion

Re:Good news

[cymen]

I was going to recommend a particular set of documentation on the Samba site but I can't find it. There seem to be a number of choices. Some of the documentation is included in the tar ball but not (easily) accessable on the website.

This new document looks good:
The Unofficial Samba HOWTO [uoregon.edu]

(moderators: no need to mod this up, really, it won't get lost in the few posts here)

Re:Good news

[Vlad_the_Inhaler]

The page marked as my home-page here might help. It is a bit short on NT/W2K/XP Domain stuff though, I stopped using Windows after Win98.

Re:

[account_deleted]

Comment removed based on user account deletion

FreeBSD Port already committed

[mbadolato]

For those that use FreeBSD, 2.2.8 is already checked into the ports.

# cvsup
# portupgrade samba

2.2.8 fixes XP SP1 domain issues

[Drakino]

I recently loaded a new system using a slipstreamed XP SP1 disc, and was having no luck joining my Samba domain with 2.2.7a. I tried the registry patches included for both 2.2.7a and TNG, and had no luck, kept getting odd errors. I downloaded and compiled 2.2.8, wiped my computer name from smbpasswd and passwd, and had no problems. So there is more to gain from the upgrade then just security.