Andrew Bartlett 6e84215d4a CVE-2018-16841 heimdal: Fix segfault on PKINIT with mis-matching principal ...

In Heimdal KRB5_KDC_ERR_CLIENT_NAME_MISMATCH is an enum, so we tried to double-free
mem_ctx.

This was introduced in 9a0263a7c316112caf0265237bfb2cfb3a3d370d for the
MIT KDC effort.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13628

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>

2018-11-25 14:46:49 +01:00

..

auth

python: Add samba.auth.session_info_fill_unix()

2018-07-12 04:32:06 +02:00

build/pasn1

…

cldap_server

cldap: clear remote address after cldap_dse_fill

2018-05-31 09:54:18 +02:00

client

s4:client: Fix size types and loop

2018-04-03 20:20:10 +02:00

cluster

dbwrap: Remove calls to loadparm

2018-04-24 01:53:19 +02:00

dns_server

CVE-2018-14629 dns: CNAME loop prevention using counter

2018-11-25 14:46:43 +01:00

dsdb

dsdb group audit tests: log_membership_changes extra tests

2018-11-05 15:47:39 +01:00

echo_server

source4/smbd: Do not overstamp the process model with "single"

2017-10-19 05:33:10 +02:00

heimdal

auth: For NTLM and KDC authentication, log the authentication duration

2018-06-25 08:32:14 +02:00

heimdal_build

heimdal: Fix build with system provided heimdal library

2018-07-10 07:30:26 +02:00

include

lib: Remove global xfile.h includes

2016-11-20 06:23:19 +01:00

kdc

CVE-2018-16841 heimdal: Fix segfault on PKINIT with mis-matching principal

2018-11-25 14:46:49 +01:00

ldap_server

ldap_server: Fix CID 1435721 Unchecked return value

2018-05-24 03:35:00 +02:00

lib

s4:lib: Fix a possible fd leak in gp_get_file()

2018-08-23 10:39:15 +02:00

libcli

s4:libcli/smb2: reapply request endtime

2018-11-06 09:11:22 +01:00

libnet

FIXUP: Improve memory handling on py_net_change_password

2018-05-17 14:28:19 +02:00

librpc

s4:librpc: autonegotiate SMB1/2/3

2018-07-31 12:36:25 +02:00

nbt_server

samdb: Add remote address to connect

2018-05-10 20:02:23 +02:00

ntp_signd

samdb: Add remote address to connect

2018-05-10 20:02:23 +02:00

ntvfs

s4:libcli: allow passing an already negotiated connection to smb_composite_connect()

2018-07-31 12:36:24 +02:00

param

param: Add non-global smb.cfg option (support 2 different smb.confs)

2018-06-28 03:34:27 +02:00

rpc_server

s4:rpc_server/netlogon: don't treet trusted domains as primary in LogonGetDomainInfo()

2018-09-04 12:14:41 +02:00

script

s4/script: convert print func to be py2/py3 compatible

2018-03-23 07:28:24 +01:00

scripting

samba_dnsupdate: honor 'dns zone scavenging' option, only update if needed

2018-09-13 08:38:16 +02:00

selftest

s4:torture/smb2/read: add test for cancelling SMB aio

2018-11-06 09:11:22 +01:00

setup

s4:dsdb: add DSDB_CONTROL_DBCHECK_FIX_LINK_DN_SID oid

2018-11-05 12:44:31 +01:00

smb_server

samdb: Add remote address to connect

2018-05-10 20:02:23 +02:00

smbd

samba: read backup date field on init and fail if present

2018-06-28 03:34:26 +02:00

torture

smbtorture: Add test for DELETE_ON_CLOSE on files with READ_ONLY attribute

2018-11-07 08:42:14 +01:00

utils

tests/demote: replace demote test bash script to python

2018-06-07 04:21:17 +02:00

web_server

s4/webserver: initialise optional parameter

2018-04-13 07:27:14 +02:00

winbind

samdb: Add remote address to connect

2018-05-10 20:02:23 +02:00

wrepl_server

source4/smbd: Do not overstamp the process model with "single"

2017-10-19 05:33:10 +02:00

.clang_complete

…

.valgrind_suppressions

…

wscript_build

Do not install smbclient4 and nmblookup4

2014-04-15 03:25:13 +02:00