summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKarolin Seeger <kseeger@samba.org>2011-02-27 18:49:27 +0100
committerKarolin Seeger <kseeger@samba.org>2011-02-27 18:49:27 +0100
commit074ad65a4b429c7671043e062bec4d9f53df53bf (patch)
tree19b84a16f7de8e5291a73971d524e427cb1e4105
parent724e44eed299c618066dec411530aa9f156119ec (diff)
downloadsamba-074ad65a4b429c7671043e062bec4d9f53df53bf.tar.gz
samba-074ad65a4b429c7671043e062bec4d9f53df53bf.tar.xz
samba-074ad65a4b429c7671043e062bec4d9f53df53bf.zip
WHATSNEW: Prepare 3.3.15 release notes.samba-3.3.15
Karolin
-rw-r--r--WHATSNEW.txt53
1 files changed, 51 insertions, 2 deletions
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index a5026cd9b5d..08a606be886 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,4 +1,53 @@
==============================
+ Release Notes for Samba 3.3.15
+ February 28, 2011
+ ==============================
+
+
+This is a security release in order to address CVE-2011-0719.
+
+
+o CVE-2011-0719:
+ All current released versions of Samba are vulnerable to
+ a denial of service caused by memory corruption. Range
+ checks on file descriptors being used in the FD_SET macro
+ were not present allowing stack corruption. This can cause
+ the Samba code to crash or to loop attempting to select
+ on a bad file descriptor set.
+
+
+Changes since 3.3.14
+--------------------
+
+
+o Jeremy Allison <jra@samba.org>
+ * BUG 7949: Fix DoS in Winbind and smbd with many file descriptors open.
+
+
+######################################################################
+Reporting bugs & Development Discussion
+#######################################
+
+Please discuss this release on the samba-technical mailing list or by
+joining the #samba-technical IRC channel on irc.freenode.net.
+
+If you do report problems then please try to send high quality
+feedback. If you don't provide vital information to help us track down
+the problem then you will probably be ignored. All bug reports should
+be filed under the Samba 3.3 product in the project's Bugzilla
+database (https://bugzilla.samba.org/).
+
+
+======================================================================
+== Our Code, Our Bugs, Our Responsibility.
+== The Samba Team
+======================================================================
+
+
+Release notes for older releases follow:
+----------------------------------------
+
+ ==============================
Release Notes for Samba 3.3.14
September 14, 2010
==============================
@@ -50,8 +99,8 @@ database (https://bugzilla.samba.org/).
======================================================================
-Release notes for older releases follow:
-----------------------------------------
+----------------------------------------------------------------------
+
==============================
Release Notes for Samba 3.3.13