Jeremy Allison b092ed3842 CVE-2017-12163: s3:smbd: Prevent client short SMB1 write from writing server memory to file. ...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13020

Signed-off-by: Jeremy Allison <jra@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User(master): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(master): Wed Sep 20 17:06:23 CEST 2017 on sn-devel-144

2017-09-20 17:06:23 +02:00

..

auth

auth/common: add support for auth4_ctx->check_ntlm_password_send/recv()

2017-08-07 15:20:03 +02:00

build

…

client

s3:smbclient: don't try any workgroup listing with "client min protocol = SMB2"

2017-08-19 01:41:24 +02:00

exports

…

groupdb

Correct "errror" typos.

2017-02-22 08:26:22 +01:00

include

CVE-2017-12150: s3:popt_common: don't turn a guessed username into a specified one

2017-09-20 13:04:10 +02:00

intl

lib: Give util_paths.c its own header

2017-06-24 01:21:10 +02:00

lib

CVE-2017-12150: s3:lib: get_cmdline_auth_info_signing_state smb_encrypt SMB_SIGNING_REQUIRED

2017-09-20 13:04:10 +02:00

libads

s3:libads: Fix changing passwords with Kerberos

2017-08-11 18:21:22 +02:00

libgpo

s3-gpo: Fix CID #1405972 Resource leak

2017-05-09 23:20:08 +02:00

libnet

cli_netlogon: Eliminate rpccli_setup_netlogon_creds_with_creds

2017-09-16 08:36:17 +02:00

librpc

s3:gse_krb5: make use of precalculated krb5 keys in fill_mem_keytab_from_secrets()

2017-08-18 10:04:56 +02:00

libsmb

CVE-2017-12150: s3:libsmb: only fallback to anonymous if authentication was not requested

2017-09-20 13:04:10 +02:00

locale

Correct "descriptior" typos.

2017-02-22 08:26:22 +01:00

locking

s3/vfs: rename SMB_VFS_STRICT_LOCK to SMB_VFS_STRICT_LOCK_CHECK

2017-07-11 03:37:44 +02:00

modules

vfs_streams_xattr: Fix segfault when running with log level 10

2017-09-14 10:58:12 +02:00

nmbd

Correct "errror" typos.

2017-02-22 08:26:22 +01:00

param

param: Add 'binddns dir' parameter

2017-09-05 23:58:20 +02:00

passdb

samdb: Rework samdb_connect_url() to return LDB error code and an error string

2017-09-20 02:25:30 +02:00

printing

s3:printing: Add NULL check for state_path()

2017-08-19 05:33:41 +02:00

profile

s3-profile: reduce dependencies of smbprofile.h

2016-03-28 20:45:16 +02:00

registry

s3-rpc_cli: add winreg_add_core_driver()

2017-05-09 16:43:13 +02:00

rpc_client

rpc_client3: Fix a debug message

2017-09-16 08:36:17 +02:00

rpc_server

s3/mdssvc: missing assignment in sl_pack_float

2017-08-29 01:00:34 +02:00

rpcclient

cli_netlogon: Eliminate rpccli_setup_netlogon_creds_with_creds

2017-09-16 08:36:17 +02:00

script

tests/fake_snap: sanitize paths

2017-08-29 04:54:50 +02:00

selftest

lib: tevent: Remove select backend.

2017-09-16 08:35:39 +02:00

services

Update smbrun to allow for settings environment variables.

2016-10-13 04:26:26 +02:00

smbd

CVE-2017-12163: s3:smbd: Prevent client short SMB1 write from writing server memory to file.

2017-09-20 17:06:23 +02:00

torture

lib: tevent: Remove select backend.

2017-09-16 08:35:39 +02:00

utils

s3:utils: Remove pointless if-clause for remote_machine

2017-08-23 13:16:20 +02:00

web

…

winbindd

winbindd: Remove an obsolete comment

2017-09-17 23:35:51 +02:00

.clang_complete

lib: Remove tdb_compat

2015-03-17 11:30:52 +01:00

.dmallocrc

…

.indent.pro

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

configure: Centralize check for posix_fallocate

2017-08-24 01:46:08 +02:00

wscript_build

acl_common: Avoid "#include vfs_acl_common.c"

2017-08-24 01:46:07 +02:00

wscript_configure_system_ncurses

Transition to waf 1.8: wrapped conf.check_cfg

2015-03-16 03:00:07 +01:00