[Pkg-samba-maint] [samba] branch jessie updated (c7d56e7 -> 5fd4493)

[Mathieu Parent]

This is an automated email from the git hooks/post-receive script.

sathieu pushed a change to branch jessie
in repository samba.

      from  c7d56e7   Release 2:4.2.14+dfsg-0+deb8u7
       new  68d2276   Patches for CVE-2017-12150, CVE-2017-12151 and CVE-2017-12163
       new  f204f15   CVE-2017-12150: s3:lib: get_cmdline_auth_info_signing_state smb_encrypt SMB_SIGNING_REQUIRED
       new  051fd60   CVE-2017-12150: s3:pylibsmb: make use of SMB_SIGNING_DEFAULT for 'samba.samba3.libsmb_samba_internal'
       new  7c00695   CVE-2017-12150: libgpo: make use of SMB_SIGNING_REQUIRED in gpo_connect_server()
       new  6f049c1   CVE-2017-12150: auth/credentials: cli_credentials_authentication_requested() should check for NTLM_CCACHE/SIGN/SEAL
       new  ab242e1   CVE-2017-12150: libcli/smb: add smbXcli_conn_signing_mandatory()
       new  38589e7   CVE-2017-12150: s3:libsmb: only fallback to anonymous if authentication was not requested
       new  a84b80e   CVE-2017-12151: s3:libsmb: add cli_state_is_encryption_on() helper function
       new  d8b2678   CVE-2017-12151: s3:libsmb: make use of cli_state_is_encryption_on()
       new  e6f6434   CVE-2017-12163: s3:smbd: Prevent client short SMB1 write from writing server memory to file.
       new  5fd4493   Release 2:4.2.14+dfsg-0+deb8u8

The 11 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 auth/credentials/credentials.c                     |  16 ++
 debian/changelog                                   |   9 +
 .../CVE-2017-12150-v4-4.patches.metze02.txt        | 234 +++++++++++++++++++++
 .../CVE-2017-12151-v4-4.patches.metze02.txt        | 111 ++++++++++
 .../patches/CVE-2017-12163-all-metze01.patch.txt   | 141 +++++++++++++
 debian/patches/series                              |   3 +
 libcli/smb/smbXcli_base.c                          |   5 +
 libcli/smb/smbXcli_base.h                          |   1 +
 libgpo/gpo_fetch.c                                 |   2 +-
 source3/lib/util_cmdline.c                         |   3 +
 source3/libsmb/clidfs.c                            |   6 +-
 source3/libsmb/clientgen.c                         |  13 ++
 source3/libsmb/libsmb_context.c                    |   2 +-
 source3/libsmb/proto.h                             |   1 +
 source3/libsmb/pylibsmb.c                          |   2 +-
 source3/smbd/reply.c                               |  50 +++++
 16 files changed, 594 insertions(+), 5 deletions(-)
 create mode 100644 debian/patches/CVE-2017-12150-v4-4.patches.metze02.txt
 create mode 100644 debian/patches/CVE-2017-12151-v4-4.patches.metze02.txt
 create mode 100644 debian/patches/CVE-2017-12163-all-metze01.patch.txt

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-samba/samba.git