linux/meta-openembedded.git/meta-networking/recipes-connectivity/samba, branch dunfell

samba: fix CVE-2023-42669 denial of service

2023-12-17T20:36:42+00:00

Upstream-Status: Backport from https://www.samba.org/samba/ftp/patches/security/samba-4.17.12-security-2023-10-10.patch Signed-off-by: Hitendra Prajapati Signed-off-by: Armin Kuster

add CVE-2011-2411 to allowlist

2021-07-05T22:26:43+00:00

This affects only on HP NonStop Server, so add it to allowlist. Signed-off-by: Sekine Shigeki Signed-off-by: Khem Raj (cherry picked from commit bb4a4f0ff8d9926137cb152fd3f2808bd9f961ce) Signed-off-by: Armin Kuster (cherry picked from commit d614d160a10b3c5ac36702fbd433f98925a9aa8e) Signed-off-by: Armin Kuster

samba: CVE-2020-14383 Security Advisory

2021-01-11T03:26:00+00:00

References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383 Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj (cherry picked from commit baee1ebeafce5d6a99dafc30b91e6fb760197686) Signed-off-by: Armin Kuster (cherry picked from commit 81d14a86353829eba1d55a93d478faf4c5527a89) Signed-off-by: Armin Kuster

samba: CVE-2020-14318 Security Advisory

2021-01-11T03:26:00+00:00

References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318 Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj (cherry picked from commit 1d44b4c03d51e91ce01cf5fd0b33155ce36f1862) Signed-off-by: Armin Kuster (cherry picked from commit 38beb6fe98894ffaf82a05ccfd6694f735daba26) Signed-off-by: Armin Kuster

samba: upgrade 4.10.17 -> 4.10.18

2020-11-10T02:58:37+00:00

This is security release in order to address CVE-2020-1472 (Unauthenticated domain takeover via netlogon ("ZeroLogon")). See: https://www.samba.org/samba/history/samba-4.10.18.html Also remove 3 backported patches. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj (cherry picked from commit bebdea8530652ff698885a3f55b0a650de319379) Signed-off-by: Armin Kuster

samba: upgrade 4.10.15 -> 4.10.17

2020-08-23T18:08:25+00:00

This is a security release in order to address the following defects: CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results. CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume excessive CPU CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with paged_results and VLV. CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd. Also backport 3 patches to fix build error with musl. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj (cherry picked from commit 1609df11530ebb73de863d0c705e16107015dbe3) Signed-off-by: Armin Kuster

samba: Fix conflicts with nss.h from glibc

2020-07-31T04:22:28+00:00

This is seen with glibc 2.32 where these names are also defined Signed-off-by: Khem Raj (cherry picked from commit 5cf2665446f3fdc16b484c64afffaa0ac8373a35) Signed-off-by: Armin Kuster

samba: upgrade 4.10.13 -> 4.10.15

2020-05-20T16:50:45+00:00

This is a security release in order to address the following defects: CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC Signed-off-by: Yi Zhao Signed-off-by: Khem Raj (cherry picked from commit a41c021cfb11418f1a32e49be0716b00b5234210) Signed-off-by: Armin Kuster

samba: Remove the dependency on libbsd

2020-04-29T15:03:06+00:00

It is unnecessary, and libbsd uses the "BSD-4-Clause" license, which can be problematic. To make it deterministic, a patch is introduced to allow libbsd support to be disabled. It resembles similar patches in, e.g., libldb, libtalloc, libtdb and libtevent. Signed-off-by: Peter Kjellerstedt Signed-off-by: Khem Raj

samba: upgrade 4.10.11 -> 4.10.13

2020-02-13T22:07:47+00:00

Changelog: https://www.samba.org/samba/history/samba-4.10.13.html Signed-off-by: Yi Zhao Signed-off-by: Khem Raj