Stefan Metzmacher ca96d57816 CVE-2015-5370: s3:rpc_server: let a failing sec_verification_trailer mark the connection as broken ...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11344

Signed-off-by: Stefan Metzmacher <metze@samba.org>

2016-04-12 19:25:31 +02:00

..

auth

CVE-2016-2115: s3:auth_domain: use SMB_SIGNING_IPC_DEFAULT

2016-04-12 19:25:26 +02:00

build

waf: improve iconv checks

2014-01-03 05:04:44 +01:00

client

CVE-2015-7560: s3: libsmb: Rename cli_posix_getfaclXX() functions to cli_posix_getacl() as they operate on pathnames.

2016-03-10 06:52:23 +01:00

exports

Revert making public of the samba-module library.

2011-12-03 08:36:30 +01:00

groupdb

Convert all uses of uint32/16/8 to _t in source3/groupdb.

2015-05-14 19:29:19 +02:00

include

CVE-2016-2115: s3:winbindd: use lp_client_ipc_{min,max}_protocol()

2016-04-12 19:25:26 +02:00

intl

lang_tdb: don't leak lock_path or data_path onto talloc tos

2014-11-03 23:46:05 +01:00

lib

CVE-2016-2115: s3:lib/netapi: use SMB_SIGNING_IPC_DEFAULT

2016-04-12 19:25:26 +02:00

libads

CVE-2016-2112: s3:libads: make sure we detect downgrade attacks

2016-04-12 19:25:24 +02:00

libgpo

gpo: don't leak cache_path onto talloc tos

2014-10-06 19:18:05 +02:00

libnet

CVE-2016-2115: s3:libnet: use SMB_SIGNING_IPC_DEFAULT

2016-04-12 19:25:26 +02:00

librpc

CVE-2015-5370: s3:librpc/rpc: let dcerpc_check_auth() auth_{type,level} against the expected values.

2016-04-12 19:25:31 +02:00

libsmb

CVE-2016-2115: s3:libsmb: use SMB_SIGNING_IPC_DEFAULT and lp_client_ipc_{min,max}_protocol()

2016-04-12 19:25:26 +02:00

locale

s3: fix encryption help messages

2015-12-22 02:22:50 +01:00

locking

s3:smbd: convert file_struct.posix_open to a bitmap with flags

2015-12-01 20:45:20 +01:00

modules

vfs_catia: Fix bug 11827, memleak

2016-04-11 14:25:59 +02:00

nmbd

dlist: remove unneeded type argument from DLIST_ADD_END()

2016-02-06 21:48:17 +01:00

param

CVE-2016-2118: docs-xml: default "allow dcerpc auth level connect" to "no"

2016-04-12 19:25:28 +02:00

passdb

build: mark explicit dependencies on pytalloc-util

2016-03-15 07:08:16 +01:00

printing

s3: Filenames: Add uint32_t flags parameter to synthetic_smb_fname().

2016-03-24 22:57:16 +01:00

profile

s3-profile: reduce dependencies of smbprofile.h

2016-03-28 20:45:16 +02:00

registry

s3:registry: use dbwrap_purge_bystring instead of dbwrap_delete_bystring

2016-03-01 21:50:24 +01:00

rpc_client

CVE-2015-5370: s3:rpc_client: verify auth_{type,level} in rpc_pipe_bind_step_one_done()

2016-04-12 19:25:31 +02:00

rpc_server

CVE-2015-5370: s3:rpc_server: let a failing sec_verification_trailer mark the connection as broken

2016-04-12 19:25:31 +02:00

rpcclient

CVE-2016-2118: s3: rpcclient: change the default auth level from DCERPC_AUTH_LEVEL_CONNECT to DCERPC_AUTH_LEVEL_INTEGRITY

2016-04-12 19:25:27 +02:00

script

seltest: add test for "ignore system acls" in vfs_acl_xattr.

2016-03-24 03:06:16 +01:00

selftest

seltest: add test for "ignore system acls" in vfs_acl_xattr.

2016-03-24 03:06:16 +01:00

services

Convert all uint32/16/8 to _t in a couple of include files.

2015-05-12 04:22:55 +02:00

smbd

CVE-2016-2114: s3:smbd: enforce "server signing = mandatory"

2016-04-12 19:25:26 +02:00

stf

…

torture

winbind: Remove unused idmap_backends_unixid_to_sid

2016-03-30 17:58:48 +02:00

utils

CVE-2016-2115: net: use SMB_SIGNING_IPC_DEFAULT

2016-04-12 19:25:26 +02:00

web

swat: Remove swat.

2013-05-18 16:32:38 +02:00

winbindd

CVE-2016-2115: s3:winbindd: use lp_client_ipc_signing()

2016-04-12 19:25:26 +02:00

.clang_complete

lib: Remove tdb_compat

2015-03-17 11:30:52 +01:00

.dmallocrc

…

.indent.pro

…

change-log

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

configure: Don't check for inotify on illumos

2016-04-06 00:15:17 +02:00

wscript_build

s3:wscript: pylibsmb depends on pycredentials

2016-03-15 22:13:23 +01:00

wscript_configure_system_ncurses

Transition to waf 1.8: wrapped conf.check_cfg

2015-03-16 03:00:07 +01:00