sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-31 01:48:16 +03:00
Code
samba-mirror/source3
History
Jeremy Allison 9a3ee861e4 CVE-2019-3880 s3: rpc: winreg: Remove implementations of SaveKey/RestoreKey. 
The were not using VFS backend calls and could only work
locally, and were unsafe against symlink races and other
security issues.

If the incoming handle is valid, return WERR_BAD_PATHNAME.

[MS-RRP] states "The format of the file name is implementation-specific"
so ensure we don't allow this.

As reported by Michael Hanselmann.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13851

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-04-05 09:14:54 +02:00
..
auth
s3:auth_winbind: ignore a missing winbindd as NT4 PDC/BDC without trusts
2019-01-09 15:55:39 +01:00
build
waf: improve iconv checks
2014-01-03 05:04:44 +01:00
client
s3:client: Fix smbspool device uri handling
2019-03-26 07:49:18 +00:00
exports
…
groupdb
Correct "errror" typos.
2017-02-22 08:26:22 +01:00
include
s3:passdb: add create_builtin_guests()
2019-03-12 11:25:43 +00:00
intl
lib: Give util_paths.c its own header
2017-06-24 01:21:10 +02:00
lib
s3:lib: Fix the debug message for adding cache entries.
2019-04-02 09:09:55 +00:00
libads
libads: Fix the build --without-ads
2018-04-19 11:40:11 +02:00
libgpo/gpext
gpo: fix the building of gpext to only once
2017-11-20 21:41:14 +01:00
libnet
libnet_join: fix "net rpc oldjoin"
2017-11-18 00:09:16 +01:00
librpc
smbd: Fix channel sequence number checks for long-running requests
2018-01-14 10:26:05 +01:00
libsmb
s3:libsmb: cli_smb2_list() can sometimes fail initially on a connection
2019-02-01 11:32:46 +01:00
locale
pam_winbind: initial Turkish translation
2017-11-15 13:52:05 +01:00
locking
smbd: Fix a memleak in async search ask sharemode
2018-09-05 13:31:41 +02:00
modules
vfs_ceph: remove ceph_fallocate/ceph_ftruncate fallback
2019-03-05 13:01:15 +00:00
nmbd
lib: Remove unused serverid.tdb
2017-12-05 04:58:26 +01:00
param
s3:loadparm: reinit_globals in lp_load_with_registry_shares()
2018-10-09 11:29:22 +02:00
passdb
passdb: Update ABI to 0.27.2
2019-03-12 11:25:43 +00:00
printing
printing: check lp_load_printers() prior to pcap cache update
2019-02-21 12:31:46 +01:00
profile
s3-profile: reduce dependencies of smbprofile.h
2016-03-28 20:45:16 +02:00
registry
s3:registry: Fix buffer truncation issues issues with gcc8
2018-06-25 21:47:19 +02:00
rpc_client
s3:cli_lsarpc: use talloc_zero_array() in dcerpc_lsa_lookup_names_generic()
2018-02-27 16:00:11 +01:00
rpc_server
CVE-2019-3880 s3: rpc: winreg: Remove implementations of SaveKey/RestoreKey.
2019-04-05 09:14:54 +02:00
rpcclient
rpcclient: Use cmdline_messaging_context
2018-10-09 11:29:23 +02:00
script
s3:script: Fix jobid check in test_smbspool.sh
2019-03-26 07:49:17 +00:00
selftest
torture: Add tests for idmap cache
2019-03-12 11:25:42 +00:00
services
Update smbrun to allow for settings environment variables.
2016-10-13 04:26:26 +02:00
smbd
s3: smbd: filenames - ensure we replace the missing '/' if we error in an intermediate POSIX path.
2019-03-05 07:39:29 +00:00
torture
torture: Add tests for idmap cache
2019-03-12 11:25:42 +00:00
utils
s3:utils/smbget fix recursive download with empty source directories
2019-01-07 15:56:31 +01:00
web
swat: Remove swat.
2013-05-18 16:32:38 +02:00
winbindd
winbind: Use idmap_cache_find_xid2sid
2019-03-12 11:25:43 +00:00
.clang_complete
lib: Remove tdb_compat
2015-03-17 11:30:52 +01:00
.dmallocrc
…
.indent.pro
…
Doxyfile
…
mainpage.dox
…
smbadduser.in
…
wscript
s3:waf: Fix the detection of makdev() macro on Linux
2019-03-28 17:42:25 +00:00
wscript_build
passdb: Update ABI to 0.27.2
2019-03-12 11:25:43 +00:00
wscript_configure_system_ncurses
Transition to waf 1.8: wrapped conf.check_cfg
2015-03-16 03:00:07 +01:00