From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH] samba: Update to 4.13.7 Date: Thu, 01 Apr 2021 13:37:35 +0200 Message-ID: <20210401113735.3720-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============6869764928311486818==" List-Id: --===============6869764928311486818== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - Update from 4.13.4 to 4.13.7 - Update of x68_64 rootfile - Changelog Release Notes for Samba 4.13.7 March 24, 2021 This is a security release in order to address the following defects: o CVE-2020-27840: An anonymous attacker can crash the Samba AD DC LDAP server by sending= easily crafted DNs as part of a bind request. More serious heap corruption is= likely also possible. Douglas Bagnall * BUG 14595: CVE-2020-27840: Fix unauthenticated remote heap corrup= tion via bad DNs. o CVE-2021-20277: User-controlled LDAP filter strings against the AD DC LDAP server may = crash the LDAP server. Andrew Bartlett * BUG 14655: CVE-2021-20277: Fix out of bounds read in ldb_handler_= fold. Douglas Bagnall * BUG 14655: CVE-2021-20277: Fix out of bounds read in ldb_handler_= fold. Release Notes for Samba 4.13.5 March 09, 2021 This is the latest stable release of the Samba 4.13 release series. o Trever L. Adams * BUG 14634: s3:modules:vfs_virusfilter: Recent talloc changes cause i= nfinite start-up failure. o Jeremy Allison * BUG 13992: s3: libsmb: Add missing cli_tdis() in error path if encry= ption setup failed on temp proxy connection. * BUG 14604: smbd: In conn_force_tdis_done() when forcing a connection= closed force a full reload of services. o Andrew Bartlett * BUG 14593: dbcheck: Check Deleted Objects and reduce noise in report= s about expired tombstones. o Ralph Boehme conn->session_info for the initial delete-on-close token. o Peter Eriksson * BUG 14648: s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in err= or path. o Bj=C3=B6rn Jacke * BUG 14624: classicupgrade: Treat old never expires value right. o Volker Lendecke * BUG 14636: g_lock: Fix uninitalized variable reads. o Stefan Metzmacher * BUG 13898: s3:pysmbd: Fix fd leak in py_smbd_create_file(). o Andreas Schneider * BUG 14625: lib:util: Avoid free'ing our own pointer. o Paul Wise * BUG 12505: HEIMDAL: krb5_storage_free(NULL) should work. Signed-off-by: Adolf Belka --- config/rootfiles/packages/x86_64/samba | 5 ++--- lfs/samba | 6 +++--- 2 files changed, 5 insertions(+), 6 deletions(-) diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packag= es/x86_64/samba index 590479da7..93c35b51e 100644 --- a/config/rootfiles/packages/x86_64/samba +++ b/config/rootfiles/packages/x86_64/samba @@ -667,7 +667,7 @@ usr/lib/samba/libldb-key-value-samba4.so usr/lib/samba/libldb-tdb-err-map-samba4.so usr/lib/samba/libldb-tdb-int-samba4.so usr/lib/samba/libldb.so.2 -usr/lib/samba/libldb.so.2.2.0 +usr/lib/samba/libldb.so.2.2.1 usr/lib/samba/libldbsamba-samba4.so usr/lib/samba/liblibcli-lsa3-samba4.so usr/lib/samba/liblibcli-netlogon3-samba4.so @@ -688,7 +688,7 @@ usr/lib/samba/libposix-eadb-samba4.so usr/lib/samba/libprinter-driver-samba4.so usr/lib/samba/libprinting-migrate-samba4.so usr/lib/samba/libpyldb-util.cpython-38-x86-64-linux-gnu.so.2 -usr/lib/samba/libpyldb-util.cpython-38-x86-64-linux-gnu.so.2.2.0 +usr/lib/samba/libpyldb-util.cpython-38-x86-64-linux-gnu.so.2.2.1 usr/lib/samba/libpytalloc-util.cpython-38-x86-64-linux-gnu.so.2 usr/lib/samba/libpytalloc-util.cpython-38-x86-64-linux-gnu.so.2.3.1 usr/lib/samba/libregistry-samba4.so @@ -711,7 +711,6 @@ usr/lib/samba/libshares-samba4.so usr/lib/samba/libsmb-transport-samba4.so usr/lib/samba/libsmbclient-raw-samba4.so usr/lib/samba/libsmbd-base-samba4.so -usr/lib/samba/libsmbd-conn-samba4.so usr/lib/samba/libsmbd-shim-samba4.so usr/lib/samba/libsmbldaphelper-samba4.so usr/lib/samba/libsmbpasswdparser-samba4.so diff --git a/lfs/samba b/lfs/samba index d218ecf38..ea8fcd428 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@ =20 include Config =20 -VER =3D 4.13.4 +VER =3D 4.13.7 =20 THISAPP =3D samba-$(VER) DL_FILE =3D $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM =3D $(URL_IPFIRE) DIR_APP =3D $(DIR_SRC)/$(THISAPP) TARGET =3D $(DIR_INFO)/$(THISAPP) PROG =3D samba -PAK_VER =3D 76 +PAK_VER =3D 77 =20 DEPS =3D avahi cups libtirpc krb5 perl-Parse-Yapp =20 @@ -44,7 +44,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_MD5 =3D ba89901019e05585f9511f52a4667d4f +$(DL_FILE)_MD5 =3D 1a900f45d5251b53c9bd28887e588583 =20 install : $(TARGET) =20 --=20 2.31.0 --===============6869764928311486818==--