[Pkg-samba-maint] Situation of samba security issues for etch

[Christian Perrier]

> I'm more in trouble with etch packages. For a reason which I still
> didn't investigate deeply, my etch pbuilder chroots do not work
> properly on my build machine(s). So, nearly nothing happened as of now
> for updates to etch for these 3 issues.

OK, my build machine now works to build etch packages.

However, using upstream patches (that were meant for samba 3.0.36) is not straightforward, far from this.

They don't apply cleanly to 3.0.24 (they're meant for 3.0.36). 

I more or less succeeded in updating them (several chunks of code for 
OK, my build machine now works to build etch packages.

However, using upstream patches (that were meant for samba 3.0.36) is not straightforward, far from this.

They don't apply cleanly to 3.0.24 (they're meant for 3.0.36). 

I more or less succeeded in updating them (several chunks of code for
CVE-2009-2948 seems to not exist in mount.cifs.c in 3.0.24)....however, the modified sources do not build:

Compiling dynconfig.c                                                                                                                         
In file included from include/includes.h:938,                                                                                                 
                 from /tmp/buildd/samba-3.0.24/source/dynconfig.c:21:                                                                         
include/smb.h:655: error: expected specifier-qualifier-list before 'bool'                                                                     
m

That seems expected: this smb.h is way different in 3.0.24 and 3.0.36. 

In short, I am unqualified to backport patches, I'm afraid.

I attach two sets of patches to this mail:
patches-ori.tar.gz are original upstream patches meant for 3.0.36
patches-new.tar.gz are those I cooked (maybe b0rken)



-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20091018/60124209/attachment.pgp>