2014-02-27 14:03:25 by Jonathan Perkin | Files touched by this commit (1) |
Log message:
Remove pam_smbpass README, build machine environment issue, apologies.
|
2014-02-26 11:12:49 by Jonathan Perkin | Files touched by this commit (1) |
Log message:
Add missing README for the pam case.
|
2014-02-13 00:18:57 by Matthias Scheler | Files touched by this commit (1568) |
Log message:
Recursive PKGREVISION bump for OpenSSL API version bump.
|
2014-01-28 13:16:39 by OBATA Akio | Files touched by this commit (1) |
Log message:
Use GNU_CONFIGURE_LIBDIR for --libdir.
|
2013-12-09 11:44:22 by Takahiro Kambe | Files touched by this commit (2) |
Log message:
Update samba to 3.6.22; Security fix for CVE-2012-6150.
Changes since 3.6.21:
---------------------
o Jeremy Allison <jra@samba.org>
* BUG 10185: CVE-2013-4408: Correctly check DCE-RPC fragment length field.
o Stefan Metzmacher <metze@samba.org>
* BUG 10185: CVE-2013-4408: Correctly check DCE-RPC fragment length field.
o Noel Power <noel.power@suse.com>
* BUGs 10300, 10306: CVE-2012-6150: Fail authentication if user isn't
member of *any* require_membership_of specified groups.
Changes since 3.6.20:
---------------------
o Jeremy Allison <jra@samba.org>
* BUG 10139: Valid utf8 filenames cause "invalid conversion error"
messages.
* BUG 10167: s3-smb2 server: smb2 breaks "smb encryption = mandatory".
* BUG 10187: Missing talloc_free can leak stackframe in error path.
* BUG 10247: xattr: Fix listing EAs on *BSD for non-root users.
o Korobkin <korobkin+samba@gmail.com>
* BUG 10118: Raise debug level for being unable to open a printer.
o Volker Lendecke <vl@samba.org>
* BUG 10195: nsswitch: Fix short writes in winbind_write_sock.
o Arvid Requate <requate@univention.de>
* BUG 10267: Fix Windows 8 printing via local printer drivers.
o Andreas Schneider <asn@cryptomilk.org>
* BUG 10194: Make offline logon cache updating for cross child domain
group membership.
|
2013-11-12 12:30:01 by Adam Ciarcinski | Files touched by this commit (2) |
Log message:
Changes 3.6.20:
These are security releases in order to address CVE-2013-4475 (ACLs are not \
checked on opening an alternate data stream on a file or directory) and \
CVE-2013-4476 (Private key in key.pem world readable).
|
2013-10-09 16:46:35 by Takahiro Kambe | Files touched by this commit (2) |
Log message:
Update samba to 3.6.19.
Changes since 3.6.18:
---------------------
o Jeremy Allison <jra@samba.org>
* BUG 5917: Make Samba work on site with Read Only Domain Controller.
o Christian Ambach <ambi@samba.org>
* BUG 8955: NetrServerPasswordSet2 timeout is too short.
o Günther Deschner <gd@samba.org>
* BUG 9899: Fix fallback to ncacn_np in cm_connect_lsat().
* BUG 9615: Fix fallback to ncacn_np in cm_connect_lsat().
* BUG 10127: Fix 'smbstatus' as non-root user.
o Volker Lendecke <vl@samba.org>
* BUG 8955: Give machine password changes 10 minutes of time.
* BUG 10106: Honour output buffer length set by the client for SMB2 GetInfo
requests.
* BUG 10114: Handle Dropbox (write-only-directory) case correctly in
pathname lookup.
o Karolin Seeger <kseeger@samba.org>
* BUG 10076: Fix variable list in man vfs_crossrename.
o Andreas Schneider <asn@samba.org>
* BUG 9994: s3-winbind: Do not delete an existing valid credential cache.
* BUG 10073: 'net ads join': Fix segmentation fault in
create_local_private_krb5_conf_for_domain.
o Richard Sharpe <realrichardsharpe@gmail.com>
* BUG 10097: MacOSX 10.9 will not follow path-based DFS referrals handed
out by Samba.
|
2013-08-14 16:40:11 by Adam Ciarcinski | Files touched by this commit (2) |
Log message:
Changes 3.6.18:
* BUG 9777: vfs_dirsort uses non-stackable calls, dirfd(), malloc instead
of talloc and doesn't cope with directories being modified whilst reading.
* BUG 9678: Windows 8 Roaming profiles fail.
* BUG 9636: Fix parsing linemarkers in preprocessor output.
* BUG 9880: Use of wrong RFC2307 primary group field.
* BUG 9983: Fix output of syslog-facility check.
* BUG 10064: Linux kernel oplock breaks can miss signals.
|
2013-08-12 04:45:55 by Takahiro Kambe | Files touched by this commit (18) |
Log message:
Update samba to 3.6.17, security release.
==============================
Release Notes for Samba 3.6.17
August 05, 2013
==============================
This is a security release in order to address
CVE-2013-4124 (Missing integer wrap protection in EA list reading can cause
server to loop with DOS).
o CVE-2013-4124:
All current released versions of Samba are vulnerable to a denial of
service on an authenticated or guest connection. A malformed packet
can cause the smbd server to loop the CPU performing memory
allocations and preventing any further service.
A connection to a file share, or a local account is needed to exploit
this problem, either authenticated or unauthenticated if guest
connections are allowed.
This flaw is not exploitable beyond causing the code to loop
allocating memory, which may cause the machine to exceed memory
limits.
Changes since 3.6.16:
---------------------
o Jeremy Allison <jra@samba.org>
* BUG 10010: CVE-2013-4124: Missing integer wrap protection in EA list
reading can cause server to loop with DOS.
|
2013-07-15 04:02:29 by Ryo ONODERA | Files touched by this commit (177) |
Log message:
* .include "../../devel/readline/buildlink3.mk" with USE_GNU_READLINE=yes
are replaced with .include "../../devel/readline/buildlink3.mk", and
USE_GNU_READLINE are removed,
* .include "../../devel/readline/buildlink3.mk" without USE_GNU_READLINE
are replaced with .include "../../mk/readline.buildlink3.mk".
|