Re: [Pkg-samba-maint] fixing CVE-2018-1050 in samba 3.3.6

2018-03-23 Thread Holger Levsen
On Fri, Mar 23, 2018 at 07:03:42AM +1300, Andrew Bartlett wrote: > > Since (afaics) there is no known exploit I cannot really test this, but > > I believe 3.6.6-6+deb7u15 is also vulnerable and the ">4.0.0" is only > > claimed to be non-affected because the samba developers don't support > > < 4.0.

Re: fixing CVE-2018-1050 in samba 3.3.6

2018-03-23 Thread Holger Levsen
On Thu, Mar 22, 2018 at 04:40:15PM +0100, Mathieu Parent wrote: > Have you seen my mail at: > https://lists.debian.org/debian-lts/2018/03/msg00047.html yes, it made me investigate this… > I agree that a fix is needed for wheezy-lts. ok. > I've added a comment in the bug about 3.6 being affecte