Description: "A security issue has been reported in Samba, which can be exploited by malicious users to bypass certain security restrictions. The problem is that access to the root file system is granted when authenticated users connect to a share with an empty string as name, and e.g. use an older version of smbclient. Successful exploitation requires that "registry shares" is enabled. NOTE: "registry shares" is implicitly set with "include = registry" or "config backend = registry". The security issue is reported in versions 3.2.0 through 3.2.6." The only vulnerable ebuild in tree is a hard-masked one, samba-3.2.0_rc2.
>=3.2.0 is still in p.mask
can you please remove the vulnerable 3.2.0_rc2 ebuild? thanks!
