linux/meta-openembedded.git/meta-networking/recipes-connectivity/samba, branch gatesgarth

samba: CVE-2020-14383 Security Advisory

2021-01-10T18:46:15+00:00

References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383 Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj (cherry picked from commit baee1ebeafce5d6a99dafc30b91e6fb760197686) Signed-off-by: Armin Kuster

samba: CVE-2020-14318 Security Advisory

2021-01-10T18:46:15+00:00

References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318 Signed-off-by: Zheng Ruoqin Signed-off-by: Khem Raj (cherry picked from commit 1d44b4c03d51e91ce01cf5fd0b33155ce36f1862) Signed-off-by: Armin Kuster

samba: upgrade 4.10.17 -> 4.10.18

2020-10-14T15:39:34+00:00

This is security release in order to address CVE-2020-1472 (Unauthenticated domain takeover via netlogon ("ZeroLogon")). See: https://www.samba.org/samba/history/samba-4.10.18.html Also remove 3 backported patches. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

samba: upgrade 4.10.15 -> 4.10.17

2020-07-31T20:22:53+00:00

This is a security release in order to address the following defects: CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results. CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume excessive CPU CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with paged_results and VLV. CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd. Also backport 3 patches to fix build error with musl. Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

samba: Fix conflicts with nss.h from glibc

2020-07-23T06:17:32+00:00

This is seen with glibc 2.32 where these names are also defined Signed-off-by: Khem Raj

samba: upgrade 4.10.13 -> 4.10.15

2020-05-15T15:31:09+00:00

This is a security release in order to address the following defects: CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

samba: Remove the dependency on libbsd

2020-04-29T15:03:06+00:00

It is unnecessary, and libbsd uses the "BSD-4-Clause" license, which can be problematic. To make it deterministic, a patch is introduced to allow libbsd support to be disabled. It resembles similar patches in, e.g., libldb, libtalloc, libtdb and libtevent. Signed-off-by: Peter Kjellerstedt Signed-off-by: Khem Raj

samba: upgrade 4.10.11 -> 4.10.13

2020-02-13T22:07:47+00:00

Changelog: https://www.samba.org/samba/history/samba-4.10.13.html Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

samba: upgrade 4.10.10 -> 4.10.11

2020-01-07T03:22:25+00:00

Security fixes: CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server (dnsserver). CVE-2019-14870: DelegationNotAllowed not being enforced in protocol transition on Samba AD DC. See: https://www.samba.org/samba/history/samba-4.10.11.html Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

samba: disable guest access and anonymous queries

2019-12-25T16:55:26+00:00

Guest accounts for Samba are a known potential vulnerability (see https://www.tenable.com/plugins/nessus/26919) where info about the host can be obtained without proper access. The option "map to guest = bad user" allows login attempts with usernames that don't exist to map to the guest account, while the "restrict anonymous" value (implicitly set to 0 before this patch) would allow any queries to obtain user and group list information. Raise the default security level by setting "restrict anonymous" to "1" and "map to guest" to "never" to avoid providing user/group info to unauthenticated users and reject login attempts with an invalid password, respectively. Signed-off-by: Trevor Gamblin Signed-off-by: Khem Raj