Jeremy Allison 284c98515b CVE-2019-10218 - s3: libsmb: Protect SMB2 client code from evil server returned names. ...

Disconnect with NT_STATUS_INVALID_NETWORK_RESPONSE if so.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14071

Signed-off-by: Jeremy Allison <jra@samba.org>

2019-10-24 11:45:18 +02:00

..

auth

s3:auth: explicitly add BUILTIN\Guests to the guest token

2019-06-21 06:49:29 +00:00

build

source3/build/charset.py: update to handle waf 2.0.4

2018-09-05 06:37:23 +02:00

client

s3: smbclient: Stop an SMB2-connection from blundering into SMB1-specific calls.

2019-10-16 12:15:53 +00:00

exports

…

groupdb

groupdb: Use dom_sid_str_buf

2018-12-20 23:40:24 +01:00

include

s3:vfs: Correctly check if OFD locks should be enabled or not

2019-02-21 12:30:43 +01:00

intl

lib: Pass mem_ctx to lock_path()

2018-08-17 11:30:10 +02:00

lib

s3:libnet: Require sealed LDAP SASL connections for joining

2019-10-16 12:15:53 +00:00

libads

s3:libads: Do not turn on canonicalization flag for MIT Kerberos

2019-10-16 16:43:59 +00:00

libgpo/gpext

libgpo: Fix CID 1438462 Error handling issues (CHECKED_RETURN)

2018-08-22 00:58:41 +02:00

libnet

s3:libads: Just change the machine password if account already exists

2019-10-16 12:15:54 +00:00

librpc

librpc: Add kerberos tracing

2018-12-19 21:49:29 +01:00

libsmb

CVE-2019-10218 - s3: libsmb: Protect SMB2 client code from evil server returned names.

2019-10-24 11:45:18 +02:00

locale

pam_winbind: initial Turkish translation

2017-11-15 13:52:05 +01:00

locking

leases: Streamline leases_db_key a bit

2018-10-03 04:11:59 +02:00

modules

vfs_glusterfs: Use pthreadpool for scheduling aio operations

2019-09-04 12:49:59 +00:00

nmbd

nmbd: Use strlcpy instead of StrnCpy

2019-01-08 03:40:26 +01:00

param

s3:loadparm: Ensure to truncate FS Volume Label at multibyte boundary

2019-06-13 08:52:28 +00:00

passdb

lookup_name: allow own domain lookup when flags == 0

2019-08-16 09:48:19 +00:00

printing

s3:libnet: Require sealed LDAP SASL connections for joining

2019-10-16 12:15:53 +00:00

profile

lib: Pass mem_ctx to cache_path()

2018-08-17 14:28:51 +02:00

registry

registry: add a missing include

2019-06-13 08:52:31 +00:00

rpc_client

s3 rpc_client: Fix Asan stack use after scope

2019-05-16 10:37:55 +00:00

rpc_server

s3:rpc_server:netlogon: simplify AUTH_TYPE_SCHANNEL check in netr_creds_server_step_check()

2019-07-09 06:33:30 +00:00

rpcclient

rpcclient: Use dom_sid_str_buf

2018-12-11 00:40:31 +01:00

script

selftest: s3: add a test for spnego downgrade from krb5 to ntlm

2019-10-16 12:15:54 +00:00

selftest

selftest: s3: add a test for spnego downgrade from krb5 to ntlm

2019-10-16 12:15:54 +00:00

services

srcctl3: Improve debug messages

2018-01-16 02:43:03 +01:00

smbd

CVE-2019-10197: smbd: split change_to_user_impersonate() out of change_to_user_internal()

2019-08-27 13:16:24 +02:00

torture

torture: Add test for talloc size accounting in memcache

2019-04-11 14:56:59 +00:00

utils

s3:libnet: Require sealed LDAP SASL connections for joining

2019-10-16 12:15:53 +00:00

web

…

winbindd

s3:libnet: Require sealed LDAP SASL connections for joining

2019-10-16 12:15:53 +00:00

.clang_complete

lib: Remove tdb_compat

2015-03-17 11:30:52 +01:00

.dmallocrc

…

.indent.pro

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

s3:waf: Do not check for nanosleep() as we don't use it anywhere

2019-10-16 12:15:52 +00:00

wscript_build

s3:client: Link smbspool_krb5_wrapper against krb5samba

2019-06-26 07:30:27 +00:00

wscript_configure_system_ncurses

source3/wscript_configure_system_ncurses: update to handle waf 2.0.4

2018-09-05 06:37:24 +02:00