Announce Samba 3.0.28
authorGerald Carter <jerry@samba.org>
Mon, 10 Dec 2007 15:33:46 +0000 (15:33 +0000)
committerGerald Carter <jerry@samba.org>
Mon, 10 Dec 2007 15:33:46 +0000 (15:33 +0000)
git-svn-id: file:///home/svn/samba-web/trunk@1158 44aeb9d7-1cd8-0310-b257-a505e0beeac2

header_columns.html
history/header_history.html
history/samba-3.0.28.html [new file with mode: 0755]
history/security.html
index.html

index 0ff225d20916b37554d9f902fa5b303b9e97a72a..2e9d258ec3c550f9125bcc18604dd912819946dc 100755 (executable)
@@ -129,9 +129,9 @@ filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src='/samba/images/log
   <div class="releases">
     <h4>Current Stable Release</h4>
     <ul>
-    <li><a href="/samba/ftp/stable/samba-3.0.27a.tar.gz">Samba 3.0.27a (gzipped)</a></li>
-    <li><a href="/samba/history/samba-3.0.27a.html">Release Notes</a></li>
-    <li><a href="/samba/ftp/stable/samba-3.0.27a.tar.asc">Signature</a></li>
+    <li><a href="/samba/ftp/stable/samba-3.0.28.tar.gz">Samba 3.0.28 (gzipped)</a></li>
+    <li><a href="/samba/history/samba-3.0.28.html">Release Notes</a></li>
+    <li><a href="/samba/ftp/stable/samba-3.0.28.tar.asc">Signature</a></li>
     </ul>
     
     <h4>Historical</h4>
index 798088223bea4cb4db9d710b88a1d74c3e04bb35..115bcf660cf8d90422e4f73951f990a2f3b59ffe 100755 (executable)
@@ -77,6 +77,7 @@
   <div class="notes">
     <h6>Release Notes</h6>
     <ul>
+    <li><a href="samba-3.0.28.html">samba-3.0.28</a></li>
     <li><a href="samba-3.0.27a.html">samba-3.0.27a</a></li>
     <li><a href="samba-3.0.27.html">samba-3.0.27</a></li>
     <li><a href="samba-3.0.26a.html">samba-3.0.26a</a></li>
diff --git a/history/samba-3.0.28.html b/history/samba-3.0.28.html
new file mode 100755 (executable)
index 0000000..5189e79
--- /dev/null
@@ -0,0 +1,51 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
+    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml">
+
+<head>
+<title>Samba - Release Notes Archive</title>
+</head>
+
+<body>
+
+   <H2>Samba 3.0.28 Available for Download</H2>
+
+<p>
+<pre>
+                   ==============================
+                   Release Notes for Samba 3.0.28
+                            Dec 10, 2007
+                   ==============================
+
+Samba 3.0.28 is a security release in order to address the following
+defect:
+
+  o CVS-2007-6015
+    Boundary failure in GETDC mailslot processing can result in 
+    a buffer overrun
+
+The original security announcement for this and past advisories can 
+be found http://www.samba.org/samba/security/
+
+######################################################################
+Changes
+#######
+
+Changes since 3.0.27a
+---------------------
+
+o   Jeremy Allison <jra@samba.org>
+    * Fix for CVS-2007-0615.
+
+o   Volker Lendecke <vl@samba.org>
+    * Fix for CVS-2007-0615.
+    * Add missing unbecome_root() calls in error path processing
+      when failing to add local groups in create_local_nt_token().
+</pre>
+
+<p>Please refer to the original <a href="/samba/history/samba-3.0.27a.html">Samba
+3.0.27a Release Notes</a> for more details regarding changes in
+previous releases.</p>
+</body>
+</html>
+
index 8731dbd5355277f7259f6e5198f38a32049ad6a6..20bb5adc6c18ca35099ef01297790d0d3ba77740 100755 (executable)
@@ -21,6 +21,15 @@ link to full release notes for each release.</p>
        <td><em>Details</em></td>
       </tr>
 
+    <tr>
+        <td>10 Dec 2007</td>
+        <td><a href="/samba/ftp/patches/security/samba-3.0.27a-CVE-2007-6015.patch">patch for Samba 3.0.27a</a></td>
+        <td>Remote Code Execution in Samba's nmbd (send_mailslot())</td>
+        <td>Samba 3.0.0 - 3.0.27a</td>
+        <td><a href="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0615">CVE-2007-6015</a></td>
+        <td><a href="/samba/security/CVE-2007-6015.html">Announcement</a></td>
+    </tr>
+
     <tr>
         <td>15 Nov 2007</td>
         <td><a href="/samba/ftp/patches/security/samba-3.0.26a-CVE-2007-5398.patch">patch for Samba 3.0.26a</a></td>
index 5b3a94ffcd98e5736162fb229fcd4e828ccad44a..fcbbfb283d972af5e1443a8985b8204bdc783667 100755 (executable)
 
     <h2>Current Release</h2>
 
-    <h4><a name="latest">20 Nov 2007</a></h4>
-    <p class="headline">Samba 3.0.27a Available for Download</p>
+    <h4><a name="latest">10 Dec 2007</a></h4>
+    <p class="headline">Samba 3.0.28 Available for Download</p>
 
-    <p>Samba 3.0.27a is a bug fix release and is the current release
-      for production servers running the Samba 3.0 series.</p>
+    <p>Samba 3.0.28 is a security release to address <a href="/samba/security/">CVE-2007-6015</a>.
 
-    <p>The <a href="/samba/ftp/stable/samba-3.0.27a.tar.gz">Samba 3.0.27a</a> source code
-       (<a href="/samba/ftp/stable/samba-3.0.27a.tar.asc">GPG
+    <p>The <a href="/samba/ftp/stable/samba-3.0.28.tar.gz">Samba 3.0.28</a> source code
+       (<a href="/samba/ftp/stable/samba-3.0.28.tar.asc">GPG
        signature</a>) can be downloaded now.   If you prefer, the 
-       <a href="/samba/ftp/patches/patch-3.0.27-3.0.27a.diffs.gz">patch 
+       <a href="/samba/ftp/patches/patch-3.0.27a-3.0.28.diffs.gz">patch 
        file against previous releases</a>
-       (<a href="/samba/ftp/patches/patch-3.0.27-3.0.27a.diffs.asc">GPG
+       (<a href="/samba/ftp/patches/patch-3.0.27a-3.0.28.diffs.asc">GPG
        signature</a>) is also available for download.   
        Please read these <a href="/samba/download/">instructions on  
        how to verify the gpg signature</a>.  Precompiled packages will