[Pkg-samba-maint] [samba] branch stretch updated (0275956 -> 8d18573)

Mathieu Parent sathieu at moszumanska.debian.org
Thu Oct 12 08:16:33 UTC 2017


This is an automated email from the git hooks/post-receive script.

sathieu pushed a change to branch stretch
in repository samba.

      from  0275956   Re-release 2:4.5.12+dfsg-1
       new  54bc9c5   Patches for CVE-2017-12150, CVE-2017-12151 and CVE-2017-12163
       new  a047095   CVE-2017-12150: s3:lib: get_cmdline_auth_info_signing_state smb_encrypt SMB_SIGNING_REQUIRED
       new  6f4f39b   CVE-2017-12150: s3:pylibsmb: make use of SMB_SIGNING_DEFAULT for 'samba.samba3.libsmb_samba_internal'
       new  2471054   CVE-2017-12150: libgpo: make use of SMB_SIGNING_REQUIRED in gpo_connect_server()
       new  043fb7f   CVE-2017-12150: auth/credentials: cli_credentials_authentication_requested() should check for NTLM_CCACHE/SIGN/SEAL
       new  c66f05d   CVE-2017-12150: libcli/smb: add smbXcli_conn_signing_mandatory()
       new  3791d24   CVE-2017-12150: s3:libsmb: only fallback to anonymous if authentication was not requested
       new  61a692b   CVE-2017-12151: s3:libsmb: add cli_state_is_encryption_on() helper function
       new  8483981   CVE-2017-12151: s3:libsmb: make use of cli_state_is_encryption_on()
       new  20c2272   CVE-2017-12163: s3:smbd: Prevent client short SMB1 write from writing server memory to file.
       new  8d18573   Release 2:4.5.12+dfsg-2

The 11 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 auth/credentials/credentials.c                     |  16 ++
 debian/changelog                                   |   9 +
 .../CVE-2017-12150-v4-5.patches.metze02.txt        | 234 +++++++++++++++++++++
 .../CVE-2017-12151-v4-5.patches.metze02.txt        | 111 ++++++++++
 .../patches/CVE-2017-12163-all-metze01.patch.txt   | 141 +++++++++++++
 debian/patches/series                              |   3 +
 libcli/smb/smbXcli_base.c                          |   5 +
 libcli/smb/smbXcli_base.h                          |   1 +
 libgpo/gpo_fetch.c                                 |   2 +-
 source3/lib/util_cmdline.c                         |   3 +
 source3/libsmb/clidfs.c                            |   6 +-
 source3/libsmb/clientgen.c                         |  13 ++
 source3/libsmb/libsmb_context.c                    |   2 +-
 source3/libsmb/proto.h                             |   1 +
 source3/libsmb/pylibsmb.c                          |   2 +-
 source3/smbd/reply.c                               |  50 +++++
 16 files changed, 594 insertions(+), 5 deletions(-)
 create mode 100644 debian/patches/CVE-2017-12150-v4-5.patches.metze02.txt
 create mode 100644 debian/patches/CVE-2017-12151-v4-5.patches.metze02.txt
 create mode 100644 debian/patches/CVE-2017-12163-all-metze01.patch.txt

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-samba/samba.git




More information about the Pkg-samba-maint mailing list