[SCM] Samba Shared Repository - annotated tag samba-4.7.9 created

Karolin Seeger kseeger at samba.org
Tue Aug 14 07:47:24 UTC 2018


The annotated tag, samba-4.7.9 has been created
        at  056b7ff5e3e8beccc91b1bf0b6e9845da031973f (tag)
   tagging  3e5da7e8878a78da96fbdccd05953c791560a6b5 (commit)
  replaces  samba-4.7.8
 tagged by  Karolin Seeger
        on  Sat Aug 11 22:04:31 2018 +0200

- Log -----------------------------------------------------------------
samba: tag release samba-4.7.9
-----BEGIN PGP SIGNATURE-----

iEYEABECAAYFAltvQU8ACgkQbzORW2Vot+qbMACgmsGkl5pmrnIKdDIccFotORB8
ztMAn3+WvBP4eZPiZb91gxeHJXjUmJtZ
=8PPP
-----END PGP SIGNATURE-----

Andrew Bartlett (2):
      CVE-2018-10918: cracknames: Fix DoS (NULL pointer de-ref) when not servicePrincipalName is set on a user
      CVE-2018-1139 libcli/auth: Add initial tests for ntlm_password_check()

Douglas Bagnall (1):
      selftest/tests.py: remove always-needed, never-set with_cmocka flag

Gary Lockyer (1):
      CVE-2018-10919 tests: test ldap searches for non-existent attributes.

G√ľnther Deschner (4):
      CVE-2018-1139 libcli/auth: fix debug messages in hash_password_check()
      CVE-2018-1139 s3-utils: use enum ntlm_auth_level in ntlm_password_check().
      CVE-2018-1139 selftest: verify whether ntlmv1 can be used via SMB1 when it is disabled.
      CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth".

Jeremy Allison (2):
      CVE-2018-10858: libsmb: Ensure smbc_urlencode() can't overwrite passed in buffer.
      CVE-2018-10858: libsmb: Harden smbc_readdir_internal() against returns from malicious servers.

Karolin Seeger (3):
      VERSION: Bump version up to 4.7.9...
      WHATSNEW: Add release notes for Samba 4.7.9.
      VERSION: Disable GIT_SNAPSHOT for the 4.7.9 release.

Tim Beale (10):
      CVE-2018-10919 security: Move object-specific access checks into separate function
      CVE-2018-10919 security: Add more comments to the object-specific access checks
      CVE-2018-10919 tests: Add tests for guessing confidential attributes
      CVE-2018-10919 tests: Add test case for object visibility with limited rights
      CVE-2018-10919 security: Fix checking of object-specific CONTROL_ACCESS rights
      CVE-2018-10919 acl_read: Split access_mask logic out into helper function
      CVE-2018-10919 acl_read: Small refactor to aclread_callback()
      CVE-2018-10919 acl_read: Flip the logic in the dirsync check
      CVE-2018-10919 acl_read: Fix unauthorized attribute access via searches
      CVE-2018-10919 tests: Add extra test for dirsync deleted object corner-case

-----------------------------------------------------------------------


-- 
Samba Shared Repository



More information about the samba-cvs mailing list