Jeremy Allison 9c2e3c72c0 s3: smbd: Fix mkdir race condition allows share escape in Samba 4.13.X and below: CVE-2021-43566 ...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13979

Signed-off-by: Jeremy Allison <jra@samba.org>

2022-01-08 11:38:19 +01:00

..

auth

CVE-2020-25717: s3-auth: fix MIT Realm regression

2021-12-08 16:01:10 +00:00

build

source3/build/charset.py: update to handle waf 2.0.4

2018-09-05 06:37:23 +02:00

client

clitar: Use do_list()'s recursion in clitar.c

2020-12-02 13:14:22 +00:00

exports

…

groupdb

smbdotconf: mark "set primary group script" with substitution="1"

2019-11-27 10:25:36 +00:00

include

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-08 10:52:10 +01:00

intl

lib: Remove "tdb based replacement for gettext"

2019-05-22 05:59:13 +00:00

lib

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-08 10:52:10 +01:00

libads

s3-libads: Pass timeout to open_socket_out in ms

2020-12-08 09:21:24 +00:00

libgpo/gpext

Spelling fixes s/emtpy/empty/

2019-09-01 22:21:26 +00:00

libnet

Add net-ads-join dnshostname=fqdn option

2020-05-29 13:33:28 +00:00

librpc

CVE-2021-23192 rpc: Give dcerpc_util.c its own header

2021-11-08 10:52:13 +01:00

libsmb

CVE-2016-2124: s3:libsmb: don't fallback to non spnego authentication if we require kerberos

2021-11-08 10:52:13 +01:00

locale

Spelling fixes s/Mirgate/Migrate/

2019-09-01 22:21:26 +00:00

locking

locking: Fix an uninitialized variable read

2021-03-08 08:51:51 +00:00

modules

s3:modules:vfs_virusfilter: Recent talloc changes cause infinite start-up failure

2021-03-05 12:18:56 +00:00

nmbd

daemons: report status to systemd even when running in foreground

2020-10-27 10:50:29 +00:00

param

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-08 10:52:10 +01:00

passdb

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-08 10:52:10 +01:00

printing

smbd: add dirfsp arg to SMB_VFS_CREATE_FILE()

2020-05-21 05:23:31 +00:00

profile

s3:profile: Allow profile subsystem to use SHA1 in FIPS mode

2019-07-09 13:31:46 +00:00

registry

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-08 10:52:10 +01:00

rpc_client

CVE-2021-23192 rpc: Give dcerpc_util.c its own header

2021-11-08 10:52:13 +01:00

rpc_server

IPA DC: add missing checks

2021-11-15 15:33:17 +00:00

rpcclient

CVE-2020-25717: s3:rpcclient: start with authoritative = 1

2021-11-08 10:52:10 +01:00

script

selftest: add a test for the "deadtime" parameter

2021-08-27 07:54:15 +00:00

selftest

librpc: Test parsing a Kerberos 5 credentials cache with ndrdump

2021-09-16 08:07:11 +00:00

services

…

smbd

s3: smbd: Fix mkdir race condition allows share escape in Samba 4.13.X and below: CVE-2021-43566

2022-01-08 11:38:19 +01:00

torture

CVE-2020-25717: s3:torture: start with authoritative = 1

2021-11-08 10:52:10 +01:00

utils

CVE-2020-25717: s3:ntlm_auth: let ntlm_auth_generate_session_info_pac() base the name on the PAC LOGON_INFO only

2021-11-08 10:52:11 +01:00

web

…

winbindd

CVE-2020-25727: idmap_nss: verify that the name of the sid belongs to the configured domain

2021-11-17 14:35:14 +00:00

.clang_complete

…

.dmallocrc

…

.indent.pro

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

s3: fix fcntl waf configure check

2021-02-26 10:57:19 +00:00

wscript_build

CVE-2021-23192 librpc: Remove the gensec dependency from library dcerpc-binding

2021-11-08 10:52:13 +01:00

wscript_configure_system_ncurses

source3/wscript_configure_system_ncurses: update to handle waf 2.0.4

2018-09-05 06:37:24 +02:00