[SECURITY] Fedora 12 Update: ncpfs-2.2.6-13.fc12

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-1145
2010-01-28 00:29:20
--------------------------------------------------------------------------------

Name        : ncpfs
Product     : Fedora 12
Version     : 2.2.6
Release     : 13.fc12
URL         : ftp://platan.vc.cvut.cz/pub/linux/ncpfs/
Summary     : Utilities for the ncpfs filesystem, a NetWare client for Linux
Description :
Ncpfs is a filesystem which understands the Novell NetWare(TM) NCP
protocol.  Functionally, NCP is used for NetWare the way NFS is used
in the TCP/IP world.  For a Linux system to mount a NetWare
filesystem, it needs a special mount program.  The ncpfs package
contains such a mount program plus other tools for configuring and
using the ncpfs filesystem.

Install the ncpfs package if you need to use the ncpfs filesystem
to use Novell NetWare files or services.

--------------------------------------------------------------------------------
Update Information:

The updated package fixes race condition by ncpfsmount/ncpfsumount operations.
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan 26 2010 Vitezslav Crhonek <vcrhonek at redhat.com> - 2.2.6-13
- Fix race condition by ncpmount/ncpumount operations (CVE-2009-3297)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #532940 - CVE-2009-3297 samba, fuse, ncpfs: Race condition by mount (mount.cifs, ncpmount) / umount (fusermount, ncpumount) operations
        https://bugzilla.redhat.com/show_bug.cgi?id=532940
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update ncpfs' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------