Stefan Metzmacher 53b2e9aff3 CVE-2018-14629 dns: fix CNAME loop prevention using counter regression ...

The loop prevention should only be done for CNAME records!

Otherwise we truncate the answer records for A, AAAA or
SRV queries, which is a bad idea if you have more than 20 DCs.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13600

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Dec  4 08:52:29 CET 2018 on sn-devel-144

(cherry picked from commit 34f4491d79b47b2fe2457b8882f11644cf773bc4)

2018-12-10 10:12:21 +01:00

..

auth

python: Add samba.auth.session_info_fill_unix()

2018-07-12 04:32:06 +02:00

build/pasn1

…

cldap_server

cldap: clear remote address after cldap_dse_fill

2018-05-31 09:54:18 +02:00

client

s4:client: Fix size types and loop

2018-04-03 20:20:10 +02:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

CVE-2018-14629 dns: fix CNAME loop prevention using counter regression

2018-12-10 10:12:21 +01:00

dsdb

CVE-2018-16857 dsdb/util: Add better default lockOutObservationWindow

2018-11-25 14:47:06 +01:00

echo_server

source4/smbd: Do not overstamp the process model with "single"

2017-10-19 05:33:10 +02:00

heimdal

auth: For NTLM and KDC authentication, log the authentication duration

2018-06-25 08:32:14 +02:00

heimdal_build

heimdal: Fix build with system provided heimdal library

2018-07-10 07:30:26 +02:00

include

lib: Remove global xfile.h includes

2016-11-20 06:23:19 +01:00

kdc

CVE-2018-16853: fix crash in expired passowrd case

2018-12-04 17:27:18 +01:00

ldap_server

CVE-2018-16851 ldap_server: Check ret before manipulating blob

2018-11-25 14:46:58 +01:00

lib

s4:lib: Fix a possible fd leak in gp_get_file()

2018-08-23 10:39:15 +02:00

libcli

s4:libcli/smb2: reapply request endtime

2018-11-06 09:11:22 +01:00

libnet

FIXUP: Improve memory handling on py_net_change_password

2018-05-17 14:28:19 +02:00

librpc

s4:librpc: autonegotiate SMB1/2/3

2018-07-31 12:36:25 +02:00

nbt_server

samdb: Add remote address to connect

2018-05-10 20:02:23 +02:00

ntp_signd

samdb: Add remote address to connect

2018-05-10 20:02:23 +02:00

ntvfs

s4:libcli: allow passing an already negotiated connection to smb_composite_connect()

2018-07-31 12:36:24 +02:00

param

param: Add non-global smb.cfg option (support 2 different smb.confs)

2018-06-28 03:34:27 +02:00

rpc_server

CVE-2018-16852 dcerpc dnsserver: refactor common properties handling

2018-11-25 14:46:54 +01:00

script

s4/script: convert print func to be py2/py3 compatible

2018-03-23 07:28:24 +01:00

scripting

samba_dnsupdate: honor 'dns zone scavenging' option, only update if needed

2018-09-13 08:38:16 +02:00

selftest

CVE-2018-16852 dcerpc dnsserver: Verification tests

2018-11-25 14:46:54 +01:00

setup

s4:dsdb: add DSDB_CONTROL_DBCHECK_FIX_LINK_DN_SID oid

2018-11-05 12:44:31 +01:00

smb_server

samdb: Add remote address to connect

2018-05-10 20:02:23 +02:00

smbd

samba: read backup date field on init and fail if present

2018-06-28 03:34:26 +02:00

torture

s4:torture/smb2/session: test smbXcli_session_set_disconnect_expired() works

2018-12-04 13:55:09 +01:00

utils

tests/demote: replace demote test bash script to python

2018-06-07 04:21:17 +02:00

web_server

s4/webserver: initialise optional parameter

2018-04-13 07:27:14 +02:00

winbind

samdb: Add remote address to connect

2018-05-10 20:02:23 +02:00

wrepl_server

source4/smbd: Do not overstamp the process model with "single"

2017-10-19 05:33:10 +02:00

.clang_complete

…

.valgrind_suppressions

…

wscript_build

Do not install smbclient4 and nmblookup4

2014-04-15 03:25:13 +02:00