Commit Message
- Update from 4.13.4 to 4.13.7
- Update of x68_64 rootfile
- Changelog
Release Notes for Samba 4.13.7 March 24, 2021
This is a security release in order to address the following defects:
o CVE-2020-27840:
An anonymous attacker can crash the Samba AD DC LDAP server by sending easily
crafted DNs as part of a bind request. More serious heap corruption is likely
also possible.
Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* BUG 14595: CVE-2020-27840: Fix unauthenticated remote heap corruption via
bad DNs.
o CVE-2021-20277:
User-controlled LDAP filter strings against the AD DC LDAP server may crash
the LDAP server.
Andrew Bartlett <abartlet@samba.org>
* BUG 14655: CVE-2021-20277: Fix out of bounds read in ldb_handler_fold.
Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* BUG 14655: CVE-2021-20277: Fix out of bounds read in ldb_handler_fold.
Release Notes for Samba 4.13.5 March 09, 2021
This is the latest stable release of the Samba 4.13 release series.
o Trever L. Adams <trever.adams@gmail.com>
* BUG 14634: s3:modules:vfs_virusfilter: Recent talloc changes cause infinite
start-up failure.
o Jeremy Allison <jra@samba.org>
* BUG 13992: s3: libsmb: Add missing cli_tdis() in error path if encryption
setup failed on temp proxy connection.
* BUG 14604: smbd: In conn_force_tdis_done() when forcing a connection closed
force a full reload of services.
o Andrew Bartlett <abartlet@samba.org>
* BUG 14593: dbcheck: Check Deleted Objects and reduce noise in reports about
expired tombstones.
o Ralph Boehme <slow@samba.org
* BUG 14503: s3: Fix fcntl waf configure check.
* BUG 14602: s3/auth: Implement "winbind:ignore domains".
* BUG 14617: smbd: Use fsp->conn->session_info for the initial
delete-on-close token.
o Peter Eriksson <pen@lysator.liu.se>
* BUG 14648: s3: VFS: nfs4_acls. Add missing TALLOC_FREE(frame) in error
path.
o Björn Jacke <bj@sernet.de>
* BUG 14624: classicupgrade: Treat old never expires value right.
o Volker Lendecke <vl@samba.org>
* BUG 14636: g_lock: Fix uninitalized variable reads.
o Stefan Metzmacher <metze@samba.org>
* BUG 13898: s3:pysmbd: Fix fd leak in py_smbd_create_file().
o Andreas Schneider <asn@samba.org>
* BUG 14625: lib:util: Avoid free'ing our own pointer.
o Paul Wise <pabs3@bonedaddy.net>
* BUG 12505: HEIMDAL: krb5_storage_free(NULL) should work.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/packages/x86_64/samba | 5 ++---
lfs/samba | 6 +++---
2 files changed, 5 insertions(+), 6 deletions(-)
@@ -667,7 +667,7 @@ usr/lib/samba/libldb-key-value-samba4.so
usr/lib/samba/libldb-tdb-err-map-samba4.so
usr/lib/samba/libldb-tdb-int-samba4.so
usr/lib/samba/libldb.so.2
-usr/lib/samba/libldb.so.2.2.0
+usr/lib/samba/libldb.so.2.2.1
usr/lib/samba/libldbsamba-samba4.so
usr/lib/samba/liblibcli-lsa3-samba4.so
usr/lib/samba/liblibcli-netlogon3-samba4.so
@@ -688,7 +688,7 @@ usr/lib/samba/libposix-eadb-samba4.so
usr/lib/samba/libprinter-driver-samba4.so
usr/lib/samba/libprinting-migrate-samba4.so
usr/lib/samba/libpyldb-util.cpython-38-x86-64-linux-gnu.so.2
-usr/lib/samba/libpyldb-util.cpython-38-x86-64-linux-gnu.so.2.2.0
+usr/lib/samba/libpyldb-util.cpython-38-x86-64-linux-gnu.so.2.2.1
usr/lib/samba/libpytalloc-util.cpython-38-x86-64-linux-gnu.so.2
usr/lib/samba/libpytalloc-util.cpython-38-x86-64-linux-gnu.so.2.3.1
usr/lib/samba/libregistry-samba4.so
@@ -711,7 +711,6 @@ usr/lib/samba/libshares-samba4.so
usr/lib/samba/libsmb-transport-samba4.so
usr/lib/samba/libsmbclient-raw-samba4.so
usr/lib/samba/libsmbd-base-samba4.so
-usr/lib/samba/libsmbd-conn-samba4.so
usr/lib/samba/libsmbd-shim-samba4.so
usr/lib/samba/libsmbldaphelper-samba4.so
usr/lib/samba/libsmbpasswdparser-samba4.so
@@ -24,7 +24,7 @@
include Config
-VER = 4.13.4
+VER = 4.13.7
THISAPP = samba-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = samba
-PAK_VER = 76
+PAK_VER = 77
DEPS = avahi cups libtirpc krb5 perl-Parse-Yapp
@@ -44,7 +44,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = ba89901019e05585f9511f52a4667d4f
+$(DL_FILE)_MD5 = 1a900f45d5251b53c9bd28887e588583
install : $(TARGET)