-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2004-25
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date : 16 Sep 2004
 Last revised           : 16 Sep 2004

 Package : samba

 Summary : Recently discovered buffer overflow vulnerabilities

 More information :
    Samba is an Open Source/Free Software suite that provides seamless file
    and print services to SMB/CIFS clients.  Samba is freely available,
    unlike other SMB/CIFS implementations, and allows for interoperability
    between Linux/Unix servers and Windows-based clients.

    Buffer overflow vulnerabilities have been discovered in Samba.

 Impact :
    The vulnerabilities allow remote attackers to cause a denial of service
    of Samba server services.

 Affected Products :
    - Turbolinux Appliance Server 1.0 Hosting Edition
    - Turbolinux Appliance Server 1.0 Workgroup Edition
    - Turbolinux 10 F...
    - Turbolinux 10 Desktop
    - Turbolinux 8 Server
    - Turbolinux 8 Workstation
    - Turbolinux 7 Server
    - Turbolinux 7 Workstation

 Solution :
    Please use the turbopkg (zabom) tool to apply the update. 
 ---------------------------------------------
 [Turbolinux 10 Desktop, Turbolinux 10 F...]
 # zabom -u samba samba-devel smbfs

 [other]
 # turbopkg
 or
 # zabom update samba samba-devel smbfs
 ---------------------------------------------


 <Turbolinux Appliance Server 1.0 Hosting Edition>

   Source Packages
   Size : MD5

   samba-2.2.7a-9jaJP.src.rpm
      7155061 8ca20f8ef7abff0378e156f6e9bfe691

   Binary Packages
   Size : MD5

   samba-2.2.7a-9jaJP.i586.rpm
     11138937 732a5963e730fbf32c246e8530454c8d
   samba-devel-2.2.7a-9jaJP.i586.rpm
       498335 e75b73f05219d89601d9019c3297c67d
   smbfs-2.2.7a-9jaJP.i586.rpm
       628623 d3c6953e5151682716063c1e24f1b0b9

 <Turbolinux Appliance Server 1.0 Workgroup Edition>

   Source Packages
   Size : MD5

   samba-2.2.7a-9jaJP.src.rpm
      7155061 24f6ebac45b185817cbe8231971dcd9b

   Binary Packages
   Size : MD5

   samba-2.2.7a-9jaJP.i586.rpm
     11156327 6f227785d0b437fca45174e329663fd7
   samba-devel-2.2.7a-9jaJP.i586.rpm
       498628 bc0bac91bf5c3949de1323f053dd4717
   smbfs-2.2.7a-9jaJP.i586.rpm
       627672 3126e92cf4a7b362e453bc1f4080d891

 <Turbolinux 10 Desktop, Turbolinux 10 F...>

   Source Packages
   Size : MD5

   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/SRPMS/samba-2.2.7a-9jaJP.src.rpm
      7155061 8054927fe099982a397ac760ebc58d0c

   Binary Packages
   Size : MD5

   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/samba-2.2.7a-9jaJP.i586.rpm
     11164913 358acd4f1e0275f790bfa3e35c716a93
   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/samba-devel-2.2.7a-9jaJP.i586.rpm
       512109 e7f669d855d34ed44ae6565a6466827e
   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/smbfs-2.2.7a-9jaJP.i586.rpm
       639529 829fe8f003115948175e4cae8597ab0c

 <Turbolinux 8 Server>

   Source Packages
   Size : MD5

   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/samba-2.2.7a-9jaJP.src.rpm
      7155061 9c9d4d37608c616e6b57f6c973bb7af5

   Binary Packages
   Size : MD5

   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/samba-2.2.7a-9jaJP.i586.rpm
     11156883 4b1d3ff6391208bb1deb9fee7684a0ef
   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/samba-devel-2.2.7a-9jaJP.i586.rpm
       498741 3ea5d49c2241ac4ea559c03b339e911f
   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/smbfs-2.2.7a-9jaJP.i586.rpm
       627730 abe304db0bcccceb7f70103748ced80d

 <Turbolinux 8 Workstation>

   Source Packages
   Size : MD5

   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/SRPMS/samba-2.2.7a-9jaJP.src.rpm
      7155061 9f06dd9aeef0e728e3306c1437c8986a

   Binary Packages
   Size : MD5

   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/samba-2.2.7a-9jaJP.i586.rpm
     11156590 69ed28551d3d56c8d167afa0c112d3d1
   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/samba-devel-2.2.7a-9jaJP.i586.rpm
       499299 d10f2ad626244e714896947a4476c36f
   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/smbfs-2.2.7a-9jaJP.i586.rpm
       628307 896bf734f803d586e2b4a1a13fcb62fd

 <Turbolinux 7 Server>

   Source Packages
   Size : MD5

   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/SRPMS/samba-2.2.7a-9jaJP.src.rpm
      7155061 c37a745290cc3cfb95f15930851ae7f7

   Binary Packages
   Size : MD5

   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/samba-2.2.7a-9jaJP.i586.rpm
     11023429 77113ab8d22afcfc293638b28cb1fea2
   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/samba-devel-2.2.7a-9jaJP.i586.rpm
       492829 cf806c7080241e15b0fea2900b2e5d50
   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/smbfs-2.2.7a-9jaJP.i586.rpm
       612783 01ec4e0edc4020d2ef99bfa47a2279a8

 <Turbolinux 7 Workstation>

   Source Packages
   Size : MD5

   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/SRPMS/samba-2.2.7a-9jaJP.src.rpm
      7155061 d6fec4fc966dcb092ab90ec6b6ecd737

   Binary Packages
   Size : MD5

   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/samba-2.2.7a-9jaJP.i586.rpm
     11025378 bc2912f826163a4bbf0c7d642e2f246f
   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/samba-devel-2.2.7a-9jaJP.i586.rpm
       492071 80ad52dc4b60246b2b54644d62fe41c5
   ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/smbfs-2.2.7a-9jaJP.i586.rpm
       612799 40f4bcbd87fb84e7131d3718f94bbcab


 References:

 samba
   [Release Notes for Samba 2.2.11]
   http://us1.samba.org/samba/history/samba-2.2.11.html

 CVE
   [CAN-2004-0186]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0186
   [CAN--2004-0686]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0686
   [CAN-2004-0829]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0829


 --------------------------------------------------------------------------
 Revision History
    16 Sep 2004 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2004 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFBSHjSK0LzjOqIJMwRApPcAJ0dAnRf4MiWO31xsogIPaiWFu0s4gCfZzgp
xlT38MgnLCGrC+IodHCWeuE=
=u7nx
-----END PGP SIGNATURE-----