The Mandriva Security Team published a new security update for Mandriva Linux. Here the announcement:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2007:104-1
http://www.mandriva.com/security/
_______________________________________________________________________

Package : samba
Date : May 23, 2007
Affected: 2007.0, 2007.1
_______________________________________________________________________

Problem Description:

A number of bugs were discovered in the NDR parsing support in Samba
that is used to decode MS-RPC requests. A remote attacker could
send a carefully crafted request that would cause a heap overflow,
possibly leading to the ability to execute arbitrary code on the server
(CVE-2007-2446).

A remote authenticated user could trigger a flaw where unescaped
user input parameters were being passed as arguments to /bin/sh
(CVE-2007-2447).

Finally, on Samba 3.0.23d and higher, when Samba translated SID to/from
name using the Samba local list of user and group accounts, a logic
error in smbd's internal security stack could result in a transition
to the root user id rather than the non-root user (CVE-2007-2444).

Update:

The fix for CVE-2007-2444 broke the behaviour of force group when
the forced group is a local Unix group for domain member servers.

This update corrects that regression.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2444
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2007.0:
2ba4a54f7c3ea9fa3e7d716b78a9ccf3 2007.0/i586/libsmbclient0-3.0.23d-2.3mdv2007.0.i586.rpm
8d5cd8a8d91808cf5b28173399a4dccd 2007.0/i586/libsmbclient0-devel-3.0.23d-2.3mdv2007.0.i586.rpm
2afc7a841894a7d1ec6a10e43be56cb3 2007.0/i586/libsmbclient0-static-devel-3.0.23d-2.3mdv2007.0.i586.rpm
862bcb6362c116f547bcbb34c32d7382 2007.0/i586/mount-cifs-3.0.23d-2.3mdv2007.0.i586.rpm
153b0bb5e27b67e8bae513774b25d4fb 2007.0/i586/nss_wins-3.0.23d-2.3mdv2007.0.i586.rpm
29d1b0a886865dd4f7d23f0cf47d754c 2007.0/i586/samba-client-3.0.23d-2.3mdv2007.0.i586.rpm
c0df231352bf46e322ad1ff8805ba25a 2007.0/i586/samba-common-3.0.23d-2.3mdv2007.0.i586.rpm
4870de87bdf5da9e6b056ffbe55a95aa 2007.0/i586/samba-doc-3.0.23d-2.3mdv2007.0.i586.rpm
f8c445732224a5c8db8b3765737ecf09 2007.0/i586/samba-server-3.0.23d-2.3mdv2007.0.i586.rpm
a15627b69d8c7865473257aa71475a41 2007.0/i586/samba-smbldap-tools-3.0.23d-2.3mdv2007.0.i586.rpm
28271a81e11470645e1b8287c755a4c3 2007.0/i586/samba-swat-3.0.23d-2.3mdv2007.0.i586.rpm
26eb7109048d443c280244c8c871b6c4 2007.0/i586/samba-vscan-clamav-3.0.23d-2.3mdv2007.0.i586.rpm
fdd8e8f3a9d098a75c6517098f7a4e5f 2007.0/i586/samba-vscan-icap-3.0.23d-2.3mdv2007.0.i586.rpm
e16d790fdd80e78b1ad0c796b3fc62f0 2007.0/i586/samba-winbind-3.0.23d-2.3mdv2007.0.i586.rpm
9725d3da0b4394c46c5a11718b02681c 2007.0/SRPMS/samba-3.0.23d-2.3mdv2007.0.src.rpm

Mandriva Linux 2007.0/X86_64:
5a40a67af7bddbac6f1a12ccc04eb71a 2007.0/x86_64/lib64smbclient0-3.0.23d-2.3mdv2007.0.x86_64.rpm
c2d3958fb241f8425a6c4b471a7e9ff0 2007.0/x86_64/lib64smbclient0-devel-3.0.23d-2.3mdv2007.0.x86_64.rpm
d896b8848adf231e7ca9732cedd1df14 2007.0/x86_64/lib64smbclient0-static-devel-3.0.23d-2.3mdv2007.0.x86_64.rpm
5bb35783003fb0598a1c8d004f1b7e89 2007.0/x86_64/mount-cifs-3.0.23d-2.3mdv2007.0.x86_64.rpm
936b0b4727ced4c51487d22eb4c728c2 2007.0/x86_64/nss_wins-3.0.23d-2.3mdv2007.0.x86_64.rpm
697a37f58cd7ee86bcb6d25fe5ce99a4 2007.0/x86_64/samba-client-3.0.23d-2.3mdv2007.0.x86_64.rpm
a2c89ccbb926ab10134bb6c08de1e708 2007.0/x86_64/samba-common-3.0.23d-2.3mdv2007.0.x86_64.rpm
a4f423f84d2de83ce0e08f7617c93dd7 2007.0/x86_64/samba-doc-3.0.23d-2.3mdv2007.0.x86_64.rpm
7f95a390b3d8a8f50b4ed742222b5cd1 2007.0/x86_64/samba-server-3.0.23d-2.3mdv2007.0.x86_64.rpm
46d3c6533ebd7bee01721ca614e955ca 2007.0/x86_64/samba-smbldap-tools-3.0.23d-2.3mdv2007.0.x86_64.rpm
ed30c61f6884f8b26187e6e3a9885a24 2007.0/x86_64/samba-swat-3.0.23d-2.3mdv2007.0.x86_64.rpm
e8ef3da7af8952bebd84406c4a638e39 2007.0/x86_64/samba-vscan-clamav-3.0.23d-2.3mdv2007.0.x86_64.rpm
559d43f9a8f2a8a361b11a97d437c321 2007.0/x86_64/samba-vscan-icap-3.0.23d-2.3mdv2007.0.x86_64.rpm
76963cced45f658ab0ad5412a5aa794b 2007.0/x86_64/samba-winbind-3.0.23d-2.3mdv2007.0.x86_64.rpm
9725d3da0b4394c46c5a11718b02681c 2007.0/SRPMS/samba-3.0.23d-2.3mdv2007.0.src.rpm

Mandriva Linux 2007.1:
2e8c595bb959e2acb3ae05b04e8387d5 2007.1/i586/libsmbclient0-3.0.24-2.2mdv2007.1.i586.rpm
f398435995e18d601ddb9dc1f1128129 2007.1/i586/libsmbclient0-devel-3.0.24-2.2mdv2007.1.i586.rpm
be221059ee4f4c8dd62f23f27b636943 2007.1/i586/libsmbclient0-static-devel-3.0.24-2.2mdv2007.1.i586.rpm
63989fd2a666fd804e93fb6de50faf79 2007.1/i586/mount-cifs-3.0.24-2.2mdv2007.1.i586.rpm
df903048b4ccde8195a48aa1c94993a1 2007.1/i586/nss_wins-3.0.24-2.2mdv2007.1.i586.rpm
43de3b657ec9bd2e99a545b93bc66826 2007.1/i586/samba-client-3.0.24-2.2mdv2007.1.i586.rpm
727d37be44200376dcddf14682f4fc7a 2007.1/i586/samba-common-3.0.24-2.2mdv2007.1.i586.rpm
de76cf361d6d6b9f25ea9e65461bcf92 2007.1/i586/samba-doc-3.0.24-2.2mdv2007.1.i586.rpm
3ddcfa99a20b0b2c5af4318e947ca5a1 2007.1/i586/samba-server-3.0.24-2.2mdv2007.1.i586.rpm
d9f5b95d336826c9787ef0232701986c 2007.1/i586/samba-smbldap-tools-3.0.24-2.2mdv2007.1.i586.rpm
9c41b0d842310e8a8583fb5b52f00680 2007.1/i586/samba-swat-3.0.24-2.2mdv2007.1.i586.rpm
abcfc7652487f311edb1adb2fc1855ea 2007.1/i586/samba-vscan-clamav-3.0.24-2.2mdv2007.1.i586.rpm
d2b387577c52b4a4c7128275a1055d8f 2007.1/i586/samba-vscan-icap-3.0.24-2.2mdv2007.1.i586.rpm
1c38d939eeb3a56511fb6aa1c80ead9b 2007.1/i586/samba-winbind-3.0.24-2.2mdv2007.1.i586.rpm
1138acd0612b3e1c235cd8e4d5a0e154 2007.1/SRPMS/samba-3.0.24-2.2mdv2007.1.src.rpm

Mandriva Linux 2007.1/X86_64:
4e28c912966b246dc09a076ebfe14a1c 2007.1/x86_64/lib64smbclient0-3.0.24-2.2mdv2007.1.x86_64.rpm
1604483d1d16e404a12317faad97d8eb 2007.1/x86_64/lib64smbclient0-devel-3.0.24-2.2mdv2007.1.x86_64.rpm
ef43dae21969f6ce04de5685b389fbf4 2007.1/x86_64/lib64smbclient0-static-devel-3.0.24-2.2mdv2007.1.x86_64.rpm
37103982308436b13a95c62dd5a6d382 2007.1/x86_64/mount-cifs-3.0.24-2.2mdv2007.1.x86_64.rpm
1d8eb64a30be1483ae35e0a822b03f62 2007.1/x86_64/nss_wins-3.0.24-2.2mdv2007.1.x86_64.rpm
5d4a67c2df92af2c8ea27b5583e90862 2007.1/x86_64/samba-client-3.0.24-2.2mdv2007.1.x86_64.rpm
b79344c4f8b2fdad0cc201cfece51402 2007.1/x86_64/samba-common-3.0.24-2.2mdv2007.1.x86_64.rpm
cb576100d93054942f7b2451246c873c 2007.1/x86_64/samba-doc-3.0.24-2.2mdv2007.1.x86_64.rpm
53007b67f56550799239b3fb17f0a71a 2007.1/x86_64/samba-server-3.0.24-2.2mdv2007.1.x86_64.rpm
cc7ebaa88c88dc7d1903ed72cfe6dbe0 2007.1/x86_64/samba-smbldap-tools-3.0.24-2.2mdv2007.1.x86_64.rpm
ba3d1524f07c35c5cac0dbc2ff2f8fe7 2007.1/x86_64/samba-swat-3.0.24-2.2mdv2007.1.x86_64.rpm
a61531290699912b3bcd6d119e49af5a 2007.1/x86_64/samba-vscan-clamav-3.0.24-2.2mdv2007.1.x86_64.rpm
3ec8fd40efdd0355c3376a7f2b12bb7f 2007.1/x86_64/samba-vscan-icap-3.0.24-2.2mdv2007.1.x86_64.rpm
779e7ff7d9af28d3f738f7fc65b1b394 2007.1/x86_64/samba-winbind-3.0.24-2.2mdv2007.1.x86_64.rpm
1138acd0612b3e1c235cd8e4d5a0e154 2007.1/SRPMS/samba-3.0.24-2.2mdv2007.1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGVOzqmqjQ0CJFipgRAtW5AKDaH6H9/e+8blA6CWIxQ6/ztdfjwwCgq1id
yNfTE1IaN5b+XGk4fbmBQCQ=
=8R4s
-----END PGP SIGNATURE-----