Bug 179867 – net-fs/samba-3.0.24-r3: Mark stable

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description SpOeK 2007-05-26 11:46:26 UTC]

After emerging Samba-3.0.24-r2, my domain stopped working. It was impossible to access any of the Samba shares. I filed a bug upstream (https://bugzilla.samba.org/show_bug.cgi?id=4637) and now, they have published an updated patch: http://samba.org/samba/ftp/patches/security/samba-3.0.24-CVE-2007-2446_v2.patch

Also, not specially related with my problem but with the security fix for CVE-2007-2444: they had updated the patch for this security issue: http://samba.org/samba/ftp/patches/security/samba-3.0.24-CVE-2007-2444_v2.patch

Take a look at http://samba.org/samba/history/security.html

Reproducible: Always

Steps to Reproduce:
1.Emerge =net-fs/samba-3.0.24-r2
2.Restart samba server.
3.Say goodbye to Samba shares.

Actual Results:  
None of the Samba shares works.

Expected Results:  
Samba domain working with access to the shares.

[Comment 1 Tiziano Müller (RETIRED) 2007-05-26 12:51:57 UTC]

Dear arch-team members.

Unfortunately it seems that 2 of the 3 security fixes for bug #177029 produced problems for many users. This means that our users should upgrade to 3.0.24-r2 because of the security bugs but actually can't because it will break their servers.

Because of this I'd like to skip the 1 month grace time for the revision bump and ask you to mark 3.0.24-r3 stable as soon as possible.

Thanks to Rafael for the report.

[Comment 2 Jeroen Roovers (RETIRED) 2007-05-26 15:12:10 UTC]

All tests passed. Seems OK to me.

Stable for HPPA.

[Comment 3 Joshua Kinard 2007-05-27 00:42:01 UTC]

mips stable.

[Comment 4 Brent Baude (RETIRED) 2007-05-27 12:59:26 UTC]

ppc64 stable

[Comment 5 Markus Meier 2007-05-27 19:31:54 UTC]

net-fs/samba-3.0.24-r3 USE="acl cups fam kerberos ldap pam python readline -async -automount -caps -doc -examples -oav -quotas (-selinux) -swat -syslog -winbind"
1. emerges on x86
2. passes test suite
3. passes collision test
4. seems to work fine

Portage 2.1.2.7 (default-linux/x86/2007.0/desktop, gcc-4.1.2, glibc-2.5-r2, 2.6.20.12 i686)
=================================================================
System uname: 2.6.20.12 i686 Genuine Intel(R) CPU           T2300  @ 1.66GHz
Gentoo Base System release 1.12.9
Timestamp of tree: Sun, 27 May 2007 17:30:01 +0000
dev-java/java-config: 1.3.7, 2.0.32
dev-lang/python:     2.3.5-r3, 2.4.4-r4
dev-python/pycrypto: 2.0.1-r5
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.16
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=prescott -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c"
CXXFLAGS="-O2 -march=prescott -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--nospinner"
FEATURES="collision-protect distlocks metadata-transfer parallel-fetch sandbox sfperms strict test userfetch userpriv usersandbox"
GENTOO_MIRRORS="http://mirror.switch.ch/mirror/gentoo/ http://gentoo.inode.at/"
LINGUAS="en de en_GB de_CH"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X a52 aac acl acpi alsa apache2 asf avahi berkdb bitmap-fonts cairo cdr cdrom cli cracklib crypt cups dbus divx dri dts dvd dvdr dvdread eds emboss encode evo fam ffmpeg firefox flac fortran gdbm gif gnome gpm gstreamer gtk hal iconv ipv6 isdnlog java jpeg kde kdeenablefinal kerberos ldap libg++ mad midi mikmod mmx mono mp3 mpeg mudflap ncurses nls nptl nptlonly ogg opengl openmp oss pam pcre pdf perl png pppd python qt3 qt3support qt4 quicktime readline reflection rtsp ruby samba sdl session smp spell spl sse sse2 sse3 ssl svg tcpd test tetex theora threads tiff truetype truetype-fonts type1-fonts unicode vcd vorbis wifi win32codecs wxwindows x264 x86 xine xml xorg xprint xv xvid zlib" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LINGUAS="en de en_GB de_CH" USERLAND="GNU" VIDEO_CARDS="i810 fbdev vesa"
Unset:  CTARGET, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY

[Comment 6 Gustavo Zacarias (RETIRED) 2007-05-28 14:44:48 UTC]

sparc stable.

[Comment 7 Raúl Porcel (RETIRED) 2007-05-28 17:18:55 UTC]

alpha/ia64/x86 stable

[Comment 8 ScytheMan 2007-05-28 23:30:35 UTC]

(In reply to comment #7)
> alpha/ia64/x86 stable
> 

uhm.. x86 seems to be marked as testing in the ebuild, yet?

[Comment 9 Christian Faulhammer (RETIRED) 2007-05-29 06:01:22 UTC]

(In reply to comment #8)
> (In reply to comment #7)
> > alpha/ia64/x86 stable
> uhm.. x86 seems to be marked as testing in the ebuild, yet?

 Not only x86.

[Comment 10 Raúl Porcel (RETIRED) 2007-05-29 11:01:09 UTC]

Oops, i stabilized the wrong ebuild.

Fixed, thanks.

[Comment 11 Joshua Kinard 2007-06-01 06:19:43 UTC]

mips stable, fyi.

[Comment 12 Peter Weller (RETIRED) 2007-06-01 12:10:02 UTC]

amd64 done

[Comment 13 nixnut (RETIRED) 2007-06-01 18:15:23 UTC]

stable on ppc

[Comment 14 Tiziano Müller (RETIRED) 2007-06-09 07:49:15 UTC]

arm,s390,sh: please?

[Comment 15 Tiziano Müller (RETIRED) 2007-07-04 08:08:54 UTC]

Closing.