samba

Several remote vulnerabilities have been discovered in samba, a free
implementation of the SMB/CIFS protocol, which may lead to the execution
of arbitrary code or denial of service. The Common Vulnerabilities and
Exposures project identifies the following problems:

• CVE-2007-0452
  It was discovered that incorrect handling of deferred file open calls
  may lead to an infinite loop, which results in denial of service.
• CVE-2007-0454
  “zybadawg333” discovered that the AFS ACL mapping VFS plugin performs
  insecure format string handling, which may lead to the execution of
  arbitrary code.

For the stable distribution (sarge) these problems have been fixed in
version 3.0.14a-3sarge4.

For the upcoming stable distribution (etch) these problems have been
fixed in version 3.0.23d-5.

For the unstable distribution (sid) these problems have been fixed in
version 3.0.23d-5.

We recommend that you upgrade your samba package.