Samba-TNG

[[start]]

Trace: » start

You are here: start

Login

You are currently not logged in! Enter your authentication credentials below to log in. You need to have cookies enabled to log in.

Login

You don't have an account yet? Just get one: Register

Forgotten your password? Get a new one: Send new password

Samba-TNG

The tiny, fast, and portable CIFS-Suite.

This page is used as documentation for the Samba-TNG project. Samba-TNG stands for Samba - The Next Generation. It was founded 2000 as a fork of Samba Classic.


Wishlist for 0.5

Here you can put your wishes for the upcoming Samba-TNG.


Vulnerabilities

All versions up to and including 0.4.99 of Samba-TNG are affected by CVE-2007-4572, CVE-2007-5398, CVE-2007-60151) and CVE-2007-2446.

For 0.4.99, we have released four patches here: CVE-2007-4572.diff, CVE-2007-5398.diff, CVE-2007-6015.diff and CVE-2007-2446-and-other.diff.
Apply using

patch -p0 <CVE-2007-4572.diff
patch -p0 <CVE-2007-5398.diff
patch -p0 <CVE-2007-6015.diff
patch -p0 <CVE-2007-2446-and-other.diff

(apply them in this order!), then

make clean proto all

For current CVS, the fixes have just been commited.

As usual, we recommend, that you keep your installation of Samba-TNG up to date.


Windows Vista

We search people who are willing to test patches for Samba-TNG ↔ Vista compatibility. Please leave a message in the Samba-TNG forum.


Release 0.4.99

The Samba-TNG team is pleased to announce the release of Samba-TNG 0.4.99. This release is considered beta code.

Important changes between 0.4 and 0.4.99:

  • Security: CVE-2004-0686, CVE-2004-0815, CVE-2004-0930
  • Unicode on the wire is not new, but it's now completly supported. Put a “unicode = yes” in smb.conf to test it :-)
  • New utilities: smbsend and convert_fs_charset
  • Major update of the manpages and HTML docs, still in progress
  • Major work on the file server code
  • Lots of small cleanups and fixes
  • Removed support for loadable vfs modules. This support has been broken for quite awhile and nobody noticed, so apparently nobody uses it.

The complete release note can be found here.

The source and binaries can be found here.


Installation

1) TNG specific: We believe, that CVE-2007-4572.diff somewhat mitigates the problem at hand in this posting. But we have not further analysed that and decided to fix the problem for real.