- Update from 4.13.4 to 4.13.7 - Update of x68_64 rootfile - Changelog Release Notes for Samba 4.13.7 March 24, 2021 This is a security release in order to address the following defects: o CVE-2020-27840: An anonymous attacker can crash the Samba AD DC LDAP server by sending easily crafted DNs as part of a bind request. More serious heap corruption is likely also possible. Douglas Bagnall douglas.bagnall@catalyst.net.nz * BUG 14595: CVE-2020-27840: Fix unauthenticated remote heap corruption via bad DNs. o CVE-2021-20277: User-controlled LDAP filter strings against the AD DC LDAP server may crash the LDAP server. Andrew Bartlett abartlet@samba.org * BUG 14655: CVE-2021-20277: Fix out of bounds read in ldb_handler_fold. Douglas Bagnall douglas.bagnall@catalyst.net.nz * BUG 14655: CVE-2021-20277: Fix out of bounds read in ldb_handler_fold. Release Notes for Samba 4.13.5 March 09, 2021 This is the latest stable release of the Samba 4.13 release series. o Trever L. Adams trever.adams@gmail.com * BUG 14634: s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure. o Jeremy Allison jra@samba.org * BUG 13992: s3: libsmb: Add missing cli_tdis() in error path if encryption setup failed on temp proxy connection. * BUG 14604: smbd: In conn_force_tdis_done() when forcing a connection closed force a full reload of services. o Andrew Bartlett abartlet@samba.org * BUG 14593: dbcheck: Check Deleted Objects and reduce noise in reports about expired tombstones. o Ralph Boehme <slow@samba.org * BUG 14503: s3: Fix fcntl waf configure check. * BUG 14602: s3/auth: Implement "winbind:ignore domains". * BUG 14617: smbd: Use fsp->conn->session_info for the initial delete-on-close token. o Peter Eriksson pen@lysator.liu.se * BUG 14648: s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error path. o Björn Jacke bj@sernet.de * BUG 14624: classicupgrade: Treat old never expires value right. o Volker Lendecke vl@samba.org * BUG 14636: g_lock: Fix uninitalized variable reads. o Stefan Metzmacher metze@samba.org * BUG 13898: s3:pysmbd: Fix fd leak in py_smbd_create_file(). o Andreas Schneider asn@samba.org * BUG 14625: lib:util: Avoid free'ing our own pointer. o Paul Wise pabs3@bonedaddy.net * BUG 12505: HEIMDAL: krb5_storage_free(NULL) should work.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org --- config/rootfiles/packages/x86_64/samba | 5 ++--- lfs/samba | 6 +++--- 2 files changed, 5 insertions(+), 6 deletions(-)
diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packages/x86_64/samba index 590479da7..93c35b51e 100644 --- a/config/rootfiles/packages/x86_64/samba +++ b/config/rootfiles/packages/x86_64/samba @@ -667,7 +667,7 @@ usr/lib/samba/libldb-key-value-samba4.so usr/lib/samba/libldb-tdb-err-map-samba4.so usr/lib/samba/libldb-tdb-int-samba4.so usr/lib/samba/libldb.so.2 -usr/lib/samba/libldb.so.2.2.0 +usr/lib/samba/libldb.so.2.2.1 usr/lib/samba/libldbsamba-samba4.so usr/lib/samba/liblibcli-lsa3-samba4.so usr/lib/samba/liblibcli-netlogon3-samba4.so @@ -688,7 +688,7 @@ usr/lib/samba/libposix-eadb-samba4.so usr/lib/samba/libprinter-driver-samba4.so usr/lib/samba/libprinting-migrate-samba4.so usr/lib/samba/libpyldb-util.cpython-38-x86-64-linux-gnu.so.2 -usr/lib/samba/libpyldb-util.cpython-38-x86-64-linux-gnu.so.2.2.0 +usr/lib/samba/libpyldb-util.cpython-38-x86-64-linux-gnu.so.2.2.1 usr/lib/samba/libpytalloc-util.cpython-38-x86-64-linux-gnu.so.2 usr/lib/samba/libpytalloc-util.cpython-38-x86-64-linux-gnu.so.2.3.1 usr/lib/samba/libregistry-samba4.so @@ -711,7 +711,6 @@ usr/lib/samba/libshares-samba4.so usr/lib/samba/libsmb-transport-samba4.so usr/lib/samba/libsmbclient-raw-samba4.so usr/lib/samba/libsmbd-base-samba4.so -usr/lib/samba/libsmbd-conn-samba4.so usr/lib/samba/libsmbd-shim-samba4.so usr/lib/samba/libsmbldaphelper-samba4.so usr/lib/samba/libsmbpasswdparser-samba4.so diff --git a/lfs/samba b/lfs/samba index d218ecf38..ea8fcd428 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@
include Config
-VER = 4.13.4 +VER = 4.13.7
THISAPP = samba-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = samba -PAK_VER = 76 +PAK_VER = 77
DEPS = avahi cups libtirpc krb5 perl-Parse-Yapp
@@ -44,7 +44,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = ba89901019e05585f9511f52a4667d4f +$(DL_FILE)_MD5 = 1a900f45d5251b53c9bd28887e588583
install : $(TARGET)