~ubuntu-branches/ubuntu/dapper/samba/dapper-security

• Changes
• Files

~ubuntu-branches/ubuntu/dapper/samba/dapper-security » Changes from revision 27

From Revision 27 to 8

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
27		* SECURITY UPDATE: denial of service via missing range check... * SECURITY UPDATE: denial of service via missing range checks on file   descriptors   - debian/patches/security-CVE-2011-0719.patch: validate miscellaneous     file descriptors.   - CVE-2011-0719	Marc Deslauriers	3.0.22-1ubuntu3.14	13 years ago
26		* SECURITY UPDATE: denial of service and possible arbitrary ... * SECURITY UPDATE: denial of service and possible arbitrary code   execution via large number of SID sub authorities   - debian/patches/security-CVE-2010-3069.patch: limit number of SID     sub authorities in source3/lib/util_sid.c, source/libads/ldap.c,     source/libsmb/cliquota.c, source/smbd/nttrans.c.   - CVE-2010-3069	Marc Deslauriers	3.0.22-1ubuntu3.13	13 years ago
25		* SECURITY UPDATE: arbitrary remote code execution. * SECURITY UPDATE: arbitrary remote code execution.   - debian/patches/security-CVE-2010-2063.patch: upstream fixes.	Kees Cook	3.0.22-1ubuntu3.12	13 years ago
24		* SECURITY UPDATE: arbitrary file disclosure via wide links * SECURITY UPDATE: arbitrary file disclosure via wide links   - debian/patches/security-CVE-2010-0926.patch: disable wide links when     UNIX extensions are enabled in source/param/loadparm.c,     source/smbd/service.c, source/smbd/trans2.c, source/smbd/vfs.c,     docs/htmldocs/manpages/smb.conf.5.html, docs/manpages/smb.conf.5.   - CVE-2010-0926 * WARNING: This changes the default samba behaviour. For security   reasons, it is no longer possible to use wide links and UNIX   extensions at the same time. After applying this security update, wide   links will be disabled automatically as UNIX extensions are turned on   by default. If wide links are required, you may re-enable them by   adding "unix extensions = no" to the [global] section of   the /etc/samba/smb.conf configuration file.	Marc Deslauriers	3.0.22-1ubuntu3.11	14 years ago
23		* SECURITY UPDATE: privilege escalation via mount.cifs race * SECURITY UPDATE: privilege escalation via mount.cifs race   - debian/patches/security-CVE-2009-3297.patch: validate mount point and     perform mount in "." to prevent race in source/client/mount.cifs.c.   - CVE-2009-3297	Marc Deslauriers	3.0.22-1ubuntu3.10	14 years ago
22		* SECURITY UPDATE: whole filesystem share via user with no h... * SECURITY UPDATE: whole filesystem share via user with no home directory   - debian/patches/security-CVE-2009-2813.patch: make sure home directory     is set in source/param/loadparm.c, source/smbd/service.c.   - CVE-2009-2813 * SECURITY UPDATE: credentials file disclosure and unauthorized usage via   setuid mount.cifs   - debian/patches/security-CVE-2009-2948.patch: don't open credentials     file if user doesn't have permission, and don't print password when     using verbose option in source/client/mount.cifs.c.   - CVE-2009-2948 * SECURITY UPDATE: denial of service via unexpected oplock break   notification reply   - debian/patches/security-CVE-2009-2906.patch: track messages already     processed in source/include/smb.h, source/smbd/process.c.   - CVE-2009-2906	Marc Deslauriers	3.0.22-1ubuntu3.9	14 years ago
21		* RELIABILITY UPDATE: the patch for CVE-2008-1105 introduced... * RELIABILITY UPDATE: the patch for CVE-2008-1105 introduced a regression   with certain client and server interactions with large file sizes. * debian/patches/security-CVE-2008-1105_pt2.patch: adjust cli_negprot()   to properly calculate buffer sizes * References   LP: #241448   https://bugzilla.samba.org/show_bug.cgi?id=5517	Jamie Strandboge	3.0.22-1ubuntu3.8	15 years ago
20		* SECURITY UPDATE: heap overflow when processing crafted SMB... * SECURITY UPDATE: heap overflow when processing crafted SMB responses * debian/patches/security-CVE-2008-1105.patch: update util_sock.c to require   specifying the buffer size and update client.c, smbctool.c, smbfilter.c,   and process.c for these changes * SECURITY UPDATE: buffer overrun in nmbd when processing crafted GETDC   mailslot requests * debian/patches/security_CVE-2007-4572.patch: check return values and   sizeof strings in charcnv.c, ntlmssp_parse.c, nmbd_processlogon.c.   Backport regression fixes from upstream. * References:   CVE-2008-1105   CVE-2007-4572   LP: #235912	Jamie Strandboge	3.0.22-1ubuntu3.7	15 years ago
19		* SECURITY UPDATE: remote code execution via GETDC mailslot ... * SECURITY UPDATE: remote code execution via GETDC mailslot request. * Add security-CVE-2007-6015.patch: thanks to Steve Langasek. * References   CVE-2007-6015	Kees Cook	3.0.22-1ubuntu3.6	16 years ago
18		* removed debian/patches/security_CVE-2007-4572.patch as it * removed debian/patches/security_CVE-2007-4572.patch as it   caused regressions. This is believed to be a non-exploitable   DoS, but will provide updated packages when a suitable fix   is found. * References:   LP #163042   LP #163116   https://bugzilla.samba.org/show_bug.cgi?id=5087	Jamie Strandboge	3.0.22-1ubuntu3.5	16 years ago
17		* SECURITY UPDATE: buffer overrun in nmbd when processing cr... * SECURITY UPDATE: buffer overrun in nmbd when processing crafted GETDC   mailslot requests * debian/patches/security_CVE-2007-4572.patch: check return values and   sizeof strings in charcnv.c, ntlmssp_parse.c, nmbd_processlogon.c * SECURITY UPDATE: arbitrary code execution in nmbd when configured as   a WINS server when processing name registration and name query requests * debian/patches/security_CVE-2007-5398.patch: properly check len in   nmbd_packets.c * References   CVE-2007-4572   CVE-2007-5398	Jamie Strandboge	3.0.22-1ubuntu3.4	16 years ago
16		* SECURITY UPDATE: remote heap overflows, remote command exe... * SECURITY UPDATE: remote heap overflows, remote command execution. * security_ndr-heap-overflows.patch: upstream fixes (CVE-2007-2446) * security_remote-command-execution.patch: upstream fixed (CVE-2007-2447)	Kees Cook	3.0.22-1ubuntu3.3	16 years ago
15		* SECURITY UPDATE: priv escalation via crafted AFS share fil... * SECURITY UPDATE: priv escalation via crafted AFS share filenames,   denial of service when renaming a file in deferred open queue. * Add 'debian/patches/ubuntu-fix-open-loop.patch': fix infinite loop,   taken from upstream patch.   - CVE-2007-0452 * Add 'debian/patches/ubuntu-fix-afsacl.patch': fix format string   overflow, taken from upstrem patch.   - CVE-2007-0454	Kees Cook	3.0.22-1ubuntu3.2	17 years ago
14		* SECURITY UPDATE: Remote DoS. * SECURITY UPDATE: Remote DoS. * Add debian/patches/track_connection_dos.patch:   - Limit active connections to 2048 to avoid DoS due to unbound array     growing when tracking active connections.   - CVE-2006-3403	Martin Pitt	3.0.22-1ubuntu3.1	17 years ago
13		* Config file changes only in this upload; no destabilising ... * Config file changes only in this upload; no destabilising code changes. * Comment out the default [homes] shares and add more verbose comments to   explain what they do and how they work (closes: launchpad.net/27608) * Add a "valid users = %S" stanza to the commented-out [homes] section, to   show users how to restrict access to \\server\username to only username. * Change the (commented-out) "printer admin" example to use "@lpadmin"   instead of "@ntadmin", since the lpadmin group is used for spool admin.	Adam Conrad	3.0.22-1ubuntu3	17 years ago
12		* After much faff about fixing this properly and getting fix... * After much faff about fixing this properly and getting fixes   submitted upstream (some of which has happened), I've concluded   that getting every case_tables usage in the code nailed down   before release just isn't going to happen, so applying a more   global bandaid (ubuntu-setlocale-fixes.patch) instead to stop   the SEGVs completely (closes: launchpad.net/{39990,39484,39956}) * Snag a patch from upstream SVN to stop winbindd from panicking   when not joined to a domain (closes: launchpad.net/32614) * Mangle patch fuzz for previous patch to make it apply cleanly.	Adam Conrad	3.0.22-1ubuntu2	17 years ago
11		* Sync with Debian's new upstream (UVF exception granted by ... * Sync with Debian's new upstream (UVF exception granted by mdz) to   resolve the information disclosure vuln reported in CVE-2006-1059 * Make the panic-action script check for 'mail' before it goes about   trying to backtrace crashes and mail to root (launchpad.net/32987) * Include patch from upstream to purge setlocale calls from the client   library, so we don't break the desktop locale (launchpad.net/28603) * Make the samba and winbind init scripts more robust in the face of a   tmpfs /var/run, creating directories as we go (launchpad.net/33389) * Fix up syntax error in the default config file (launchpad.net/37965)	Adam Conrad	3.0.22-1ubuntu1	18 years ago
10		* SECURITY UPDATE: Password leakage. * SECURITY UPDATE: Password leakage. * Add debian/patches/winbind-cleartext-password.patch:   - Do not expose the machine account credentials in winbind log files.   - Patch taken from stable version 3.0.22. * References:   CVE-2006-1059   http://us1.samba.org/samba/security/CAN-2006-1059.html	Martin Pitt	3.0.21c-1ubuntu2	18 years ago
9		* Merge with Debian for new upstream bugfixes, UVF exception... * Merge with Debian for new upstream bugfixes, UVF exception by mdz. * Remove dapper->dapper upgrade hack, which should be a non-issue now.	Adam Conrad	3.0.21c-1ubuntu1	18 years ago
8		Due to a misplaced file in older samba packages, temporarily... Due to a misplaced file in older samba packages, temporarily make python2.4-samba Replace samba for smooth dapper->dapper upgrades.	Adam Conrad	3.0.21b-1ubuntu2	18 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1