Jeremy Allison be13892020 CVE-2021-44141: s3: smbd: Fix a subtle bug in the error returns from filename_convert(). ...

If filename_convert() fails to convert the path, we never call
check_name(). This means we can return an incorrect error code
(NT_STATUS_ACCESS_DENIED) if we ran into a symlink that points
outside the share to a non-readable directory. We need to make
sure in this case we always call check_name().

Remove knownfail.d/symlink_traversal.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14911

Signed-off-by: Jeremy Allison <jra@samba.org>

2022-01-31 15:27:37 +00:00

..

auth

CVE-2020-25717: s3-auth: fix MIT Realm regression

2021-12-03 12:05:42 +00:00

build

…

client

s3: smbclient: In do_host_query(), if we need SMB1, ensure we select NT1 as the client max protocol" before continuing.

2022-01-06 11:50:32 +00:00

exports

…

groupdb

lib: relicense smb_strtoul(l) under LGPLv3

2020-08-03 22:21:02 +00:00

include

lib: Remove unused asprintf_strupper_m()

2022-01-18 20:22:38 +00:00

intl

lib: Remove "tdb based replacement for gettext"

2019-05-22 05:59:13 +00:00

lib

CVE-2021-44142: libadouble: harden parsing code

2022-01-31 15:27:37 +00:00

libads

s3:libads: Disable NTLMSSP if not allowed (for builds without kerberos)

2022-01-21 23:33:36 +00:00

libgpo/gpext

Spelling fixes s/emtpy/empty/

2019-09-01 22:21:26 +00:00

libnet

s3:libnet: Do not set ADS_AUTH_ALLOW_NTLMSSP in FIPS mode

2022-01-22 00:27:52 +00:00

librpc

s3:rpc_server: Delete unused code and doc references

2021-12-10 14:02:30 +00:00

libsmb

libsmb: Avoid a cast

2022-01-18 20:22:38 +00:00

locale

pam_winbind/ro.po: fix error from previous patch merge

2020-10-29 20:49:16 +00:00

locking

s3: smbd: Move implicit call to lp_posix_cifsu_locktype() out of init_strict_lock_struct().

2022-01-06 15:11:38 +00:00

modules

s3:modules: Fix possible dereference of NULL for fio

2022-01-11 00:22:09 +00:00

nmbd

source3: move lib/substitute.c functions out of proto.h

2021-11-11 13:49:32 +00:00

param

s3: smbd: Rename "unix extensions" -> "smb1 unix extensions".

2022-01-25 21:43:59 +00:00

passdb

source3: move lib/substitute.c functions out of proto.h

2021-11-11 13:49:32 +00:00

printing

printing/bgqd: Disable systemd notifications

2022-01-27 10:53:50 +00:00

profile

profile3: remove an unused include

2022-01-18 20:22:38 +00:00

registry

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-09 19:45:33 +00:00

rpc_client

s3:rpc_client: Add rpc_pipe_open_local_np()

2021-12-10 14:02:30 +00:00

rpc_server

s3/rpc_server: install elasticsearch_mappings.json

2022-01-28 10:22:31 +00:00

rpcclient

rpcclient: Fix ncacn_ip_tcp:<ip-address>

2022-01-10 11:47:34 +00:00

script

CVE-2021-44141: s3: torture: In test_smbclient_s3, change the error codes expected for test_widelinks() and test_nosymlinks() from ACCESS_DENIED to NT_STATUS_OBJECT_NAME_NOT_FOUND.

2022-01-31 15:27:37 +00:00

selftest

CVE-2021-44141: s3: torture: Add samba3.blackbox.test_symlink_traversal.SMB1.posix

2022-01-31 15:27:37 +00:00

services

s3:services: Disable rcinit-based service control code

2021-12-10 14:02:30 +00:00

smbd

CVE-2021-44141: s3: smbd: Fix a subtle bug in the error returns from filename_convert().

2022-01-31 15:27:37 +00:00

torture

CVE-2021-44141: s3: torture: Change expected error return for samba3.smbtorture_s3.plain.POSIX.smbtorture.

2022-01-31 15:27:37 +00:00

utils

s3:utils: set ads->auth.flags using krb5_state

2022-01-21 23:33:36 +00:00

web

…

winbindd

s3:winbindd: Do not set ADS_AUTH_ALLOW_NTLMSSP in FIPS mode

2022-01-21 23:33:36 +00:00

.clang_complete

…

.dmallocrc

…

.indent.pro

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

s3:rpc_server: Activate samba-dcerpcd

2021-12-10 14:02:30 +00:00

wscript_build

CVE-2021-44142: libadouble: add basic cmocka tests

2022-01-31 15:27:37 +00:00

wscript_configure_system_ncurses

…