[Pkg-mc-devel] Bug#432324: temp fix for smbfs problem in mc
Patrick Winnertz
winnie at debian.org
Thu Mar 6 12:50:07 UTC 2008
Hello,
Atm I think over disabling the smbfs extension for mc since this lib is
over 10 years old. And I think there will be maybe several big security
issues within this lib (which are of course fixed in the newer ones but
not in that old one). I doesn't check that, but according to Noel Köthe,
who is one of the samba maints within debian, there should be several
around.
So a temp. fix would be to disable the smbfs extension in mc. The correct
fix would be to link dynamically against the libsmbclient lib. If someone
has a patch to fix this, I would be _very_ glad, since I think this
feature is often used in mc.
@Nico: I cc'ed you as member of testing security: I guess this would also
affect mc in oldstable, stable and testing. What do you think?
@Pavel: You told me that you worked on this patch (link dynamically)
several weeks ago, is there any progress? Such a fix would be really
important for the users! :)
Greetings
Winnie
ps: My whish is that there is a patch around very fast. Pavel, if you
started to work on this and have something incomplete somewhere please
reply and point me to this!
--
.''`. Patrick Winnertz <winnie at debian.org>
: :' : GNU/Linux Debian Developer
`. `'` http://www.der-winnie.de http://people.skolelinux.org/~winnie
`- Debian - when you have better things to do than fixing systems
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : http://lists.alioth.debian.org/pipermail/pkg-mc-devel/attachments/20080306/ca7842be/attachment-0001.pgp
More information about the Pkg-mc-devel
mailing list