Updated samba packages fix security vulnerabilities

Updated Samba packages fixing various security vulnerabilities are now
available for Red Hat Linux on IBM iSeries and pSeries systems.

Samba is a suite of utilities providing file and printer sharing services
to SMB/CIFS clients.

A buffer overflow in the SMB/CIFS packet fragment re-assembly code for the
SMB daemon (smbd) in unpatched versions of Samba before 2.2.8 allows remote
attackers to execute arbitrary code. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CAN-2003-0085 to
this issue.

The code for writing reg files in Samba before 2.2.8 allows local users to
overwrite arbitrary files via a race condition involving chown. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2003-0086 to this issue.

Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers
to execute arbitrary code or cause a denial of service, as discovered by
the Samba team during a code audit. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CAN-2003-0196 to
this issue.

A buffer overflow in the call_trans2open function allows remote attackers
to execute arbitrary code. The Common Vulnerabilities and Exposures
project (cve.mitre.org) has assigned the name CAN-2003-0201 to this issue.

All users of Samba are advised to update to the packages listed in this
erratum, which contain backported patches correcting these vulnerabilities.

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains the
desired RPMs.

Please note that this update is also available via Red Hat Network. Many
people find this an easier way to apply updates. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0085
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0086
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0196
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0201
http://www.digitaldefense.net/labs/advisories/DDI-1013.txt
http://www.samba.org/samba/whatsnew/samba-2.2.8.html

smb