This problem is tracked on Launchpad. You can subscribe to the bug and watch the progress.
The latest comment as of today:
Tyler Hicks (tyhicks) wrote 14 hours ago:
Thanks, Ryan! We are aware of the issue and we are currently working
on an update.
The fix is released, it should be in your repositories:
This bug was fixed in the package samba - 2:3.4.7~dfsg-1ubuntu3.9
samba (2:3.4.7~dfsg-1ubuntu3.9) lucid-security; urgency=low
* SECURITY UPDATE: Unauthenticated remote code execution via
RPC calls (LP: #978458)
- debian/patches/CVE-2012-1182-1.patch: Fix PIDL compiler to generate code
that uses the same value for array allocation and array length checks.
Based on upstream patch.
- debian/patches/CVE-2012-1182-2.patch: Regenerate PIDL generated files with
the patched PIDL compiler
-- Tyler Hicks <email address hidden> Thu, 12 Apr 2012 05:28:44 -0500