See the original mail on bugtraq: http://seclists.org/lists/bugtraq/2004/Mar/0189.html and the answer from the Samba team (URL): http://seclists.org/lists/bugtraq/2004/Mar/0195.html This is maybe only a minor issue and doesn't affect a great percentage of Gentoo users but it should be fixed nevertheless. regards, Tobias Reproducible: Always Steps to Reproduce:
Donny -- comments?
Hi Kurt This file is packaged in their examples/ directory, not a big deal. It will be fixed in the next release.
Sounds great. I'll leave the bug open just to track it until then and then close it. Thanks for the update.
I'll look at this one, as long as I'm looking at bug 41800.
Created attachment 28985 [details, diff] samba-3.0.2a-smbprint.patch Patch to fix tmpfile symlink bug. I noticed there are two versions of smbprint available -- smbprint and smbprint-new.sh -- so I patched both of them. Can someone (preferably more than one someone) please review this patch and let me know if it's OK? I'll attach an updated ebuild for this and for the setuid issue to bug 41800 when I'm finished testing.
Also CCing mglauche on the smbprint bug.
Subject needs both category and package name.
Also, worth noting that this is a documentation bug, so upgrading to the "fixed" version would give the user of the machine documentation which is fixed, but the problem still prevails. smbprint used to be the "base" for copy&paste operation, make your own script. So the sysadmin needs to correct *his/her* own version by him/herself ... But as the original poster said, the affected userbase is *very* low, i think it only affects people who use samba on the workstation and windows on server, and use lpr/lprng as their printing package (SMB printing is supported by CUPS, so no need for this script then ..)
Common GLSA with #41800. CondorDes: I reviewed your draft, it's OK for me. -K
GLSA 200404-21