Stefan Metzmacher 735d4ba376 CVE-2015-5370: s3:rpc_client: move AS/U hack to the top of cli_pipe_validate_current_pdu() ...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11344

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>

2016-03-30 04:21:31 +02:00

..

auth

CVE-2016-2115: s3:auth_domain: use SMB_SIGNING_IPC_DEFAULT

2016-03-30 04:18:12 +02:00

build

waf: improve iconv checks

2014-01-03 05:04:44 +01:00

client

CVE-2015-7560: s3: libsmb: Rename cli_posix_getfaclXX() functions to cli_posix_getacl() as they operate on pathnames.

2016-02-24 11:40:02 +01:00

exports

…

groupdb

Convert all uses of uint32/16/8 to _t in source3/groupdb.

2015-05-14 19:29:19 +02:00

include

CVE-2016-2115: s3:winbindd: use lp_client_ipc_{min,max}_protocol()

2016-03-30 04:18:11 +02:00

intl

lang_tdb: don't leak lock_path or data_path onto talloc tos

2014-11-03 23:46:05 +01:00

lib

CVE-2016-2115: s3:lib/netapi: use SMB_SIGNING_IPC_DEFAULT

2016-03-30 04:18:12 +02:00

libads

CVE-2016-2112: s3:libads: make sure we detect downgrade attacks

2016-03-29 16:27:02 +02:00

libgpo

gpo: don't leak cache_path onto talloc tos

2014-10-06 19:18:05 +02:00

libnet

CVE-2016-2115: s3:libnet: use SMB_SIGNING_IPC_DEFAULT

2016-03-30 04:18:12 +02:00

librpc

CVE-2015-5370: s3:librpc/rpc: don't call dcerpc_pull_auth_trailer() if auth_length is 0

2016-03-30 04:21:30 +02:00

libsmb

CVE-2016-2115: s3:libsmb: use SMB_SIGNING_IPC_DEFAULT and lp_client_ipc_{min,max}_protocol()

2016-03-30 04:18:12 +02:00

locale

winbind/i18n: update Japanese pam winbind translation

2014-07-26 20:43:28 +02:00

locking

s3:smbd: convert file_struct.posix_open to a bitmap with flags

2015-12-17 11:05:24 +01:00

modules

vfs_shadow_copy2: fix case where snapshots are outside the share

2016-01-14 10:13:23 +01:00

nmbd

fix uninitialised read in process_host_announce

2015-11-20 09:11:18 +01:00

pam_smbpass

s3:pam_smbpass: remove unused dependency to LIBNTLMSSP

2016-03-29 16:24:31 +02:00

param

CVE-2016-2118: docs-xml: default "allow dcerpc auth level connect" to "no"

2016-03-30 04:18:52 +02:00

passdb

s3: lsa: lookup_name() logic for unqualified (no DOMAIN\ component) names is incorrect.

2015-10-20 08:48:17 +02:00

printing

s3-rpc_server: Fix inteface typo.

2015-06-04 03:51:29 +02:00

profile

Convert all uint32/16/8 to _t in a grab-bag of remaining files.

2015-05-14 22:16:56 +02:00

registry

lib: Remove unused functions

2015-06-23 22:12:09 +02:00

rpc_client

CVE-2015-5370: s3:rpc_client: move AS/U hack to the top of cli_pipe_validate_current_pdu()

2016-03-30 04:21:31 +02:00

rpc_server

CVE-2016-2118: s3:rpc_server/samr: allow _samr_ValidatePassword only with PRIVACY...

2016-03-30 04:18:53 +02:00

rpcclient

CVE-2016-2118: s3: rpcclient: change the default auth level from DCERPC_AUTH_LEVEL_CONNECT to DCERPC_AUTH_LEVEL_INTEGRITY

2016-03-30 04:18:32 +02:00

script

s3:test_rpcclient_samlogon.sh: test samlogon with schannel

2016-03-29 16:24:45 +02:00

selftest

s3:selftest: rpc.samr.passwords.validate should run with [seal] in order to be realistic

2016-03-29 16:24:45 +02:00

services

Convert all uint32/16/8 to _t in a couple of include files.

2015-05-12 04:22:55 +02:00

smbd

CVE-2016-2114: s3:smbd: enforce "server signing = mandatory"

2016-03-30 04:17:39 +02:00

stf

…

torture

s3:torture/test_ntlm_auth.py: add --client-use-cached-creds option

2016-03-29 16:24:36 +02:00

utils

CVE-2016-2115: net: use SMB_SIGNING_IPC_DEFAULT

2016-03-30 04:18:12 +02:00

web

swat: Remove swat.

2013-05-18 16:32:38 +02:00

winbindd

CVE-2016-2115: s3:winbindd: use lp_client_ipc_signing()

2016-03-30 04:18:11 +02:00

.clang_complete

lib: Remove tdb_compat

2015-03-17 11:30:52 +01:00

.dmallocrc

…

.indent.pro

…

change-log

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

s3:wscript: fix indentation

2015-08-04 07:27:23 +02:00

wscript_build

s3:libsmb: unused ntlmssp.c

2016-03-29 16:24:42 +02:00

wscript_configure_system_ncurses

Transition to waf 1.8: wrapped conf.check_cfg

2015-03-16 03:00:07 +01:00