1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-05 09:18:06 +03:00
samba-mirror/source4
Joseph Sutton 4b61092459 CVE-2022-2031 auth: Add ticket type field to auth_user_info_dc and auth_session_info
This field may be used to convey whether we were provided with a TGT or
a non-TGT. We ensure both structures are zeroed out to avoid incorrect
results being produced by an uninitialised field.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andreas Schneider <asn@samba.org>
2022-07-24 11:42:02 +02:00
..
auth CVE-2022-2031 auth: Add ticket type field to auth_user_info_dc and auth_session_info 2022-07-24 11:42:02 +02:00
build/pasn1
cldap_server s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
client lib/util: remove extra safe_string.h file 2020-08-28 02:18:40 +00:00
cluster dbwrap: Remove calls to loadparm 2018-04-24 01:53:19 +02:00
dns_server CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message 2022-07-24 11:41:53 +02:00
dsdb selftest: Check received LDB error code when STRICT_CHECKING=0 2022-07-24 11:42:01 +02:00
echo_server s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
heimdal CVE-2022-2031 s4:kdc: Reject tickets during the last two minutes of their life 2022-07-24 11:42:02 +02:00
heimdal_build kdc: sign ticket using Windows PAC 2021-10-26 12:00:27 +00:00
include lib: Remove global xfile.h includes 2016-11-20 06:23:19 +01:00
kdc CVE-2022-32744 s4:kpasswd: Ensure we pass the kpasswd server principal into krb5_rd_req_ctx() 2022-07-24 11:42:02 +02:00
ldap_server CVE-2021-3670 ldap_server: Clearly log LDAP queries and timeouts 2021-12-02 10:33:13 +00:00
lib CVE-2022-32746 s4/registry: Use LDB_FLAG_MOD_TYPE() for flags equality check 2022-07-24 11:41:53 +02:00
libcli CVE-2016-2124: s4:libcli/sesssetup: don't fallback to non spnego authentication if we require kerberos 2021-11-08 10:46:45 +01:00
libnet provision: Decrease the length of random machine passwords 2022-03-07 10:12:26 +00:00
librpc blackbox.ndrdump: fix test_ndrdump_fuzzed_NULL_struct_ntlmssp_CHALLENGE_MESSAGE test 2022-01-30 10:21:21 +00:00
nbt_server CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message 2022-07-24 11:41:53 +02:00
ntp_signd s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
ntvfs python: Ensure reference counts are properly incremented 2021-09-16 06:50:11 +00:00
param s4:param: Add 'weak crypto' getter to pyparam 2020-10-29 14:19:36 +00:00
rpc_server CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message 2022-07-24 11:41:53 +02:00
samba Happy New Year 2021! 2021-01-01 11:56:23 +00:00
script PY3: change shebang to python3 in source4/dsdb dir 2018-12-14 14:40:20 +01:00
scripting provision: Decrease the length of random machine passwords 2022-03-07 10:12:26 +00:00
selftest CVE-2022-2031 tests/krb5: Add tests for kpasswd service 2022-07-24 11:42:02 +02:00
setup CVE-2020-25722 blackbox/upgrades tests: ignore SPN for ldapcmp 2021-11-08 10:46:44 +01:00
smb_server s4:smb_server: don't set mapped_state explicitly in auth_usersupplied_info 2022-03-16 14:27:11 +00:00
torture Revert "CVE-2020-25719 s4/torture: Expect additional PAC buffers" 2022-07-24 11:42:01 +02:00
utils lib/util: remove extra safe_string.h file 2020-08-28 02:18:40 +00:00
winbind CVE-2022-32746 ldb: Make use of functions for appending to an ldb_message 2022-07-24 11:41:53 +02:00
wrepl_server s4: rename source4/smbd/ to source4/samba/ 2020-11-27 10:07:18 +00:00
.clang_complete
.valgrind_suppressions
wscript_build