[{"id":1772487,"web_url":"http://patchwork.ozlabs.org/comment/1772487/","msgid":"<87y3p8wm2g.fsf@dell.be.48ers.dk>","list_archive_url":null,"date":"2017-09-21T07:24:55","subject":"Re: [Buildroot] [PATCH 1/1] package/samba4: security bump to\n\tversion 4.6.8","submitter":{"id":42365,"url":"http://patchwork.ozlabs.org/api/people/42365/","name":"Peter Korsgaard","email":"peter@korsgaard.com"},"content":">>>>> \"Bernd\" == Bernd Kuhls writes:\n\n > Release notes:\n > https://www.samba.org/samba/history/samba-4.6.8.html\n\n > Fixes\n > - CVE-2017-12150 (SMB1/2/3 connections may not require signing where\n > they should)\n > - CVE-2017-12151 (SMB3 connections don't keep encryption across DFS\n > redirects)\n > - CVE-2017-12163 (Server memory information leak over SMB1)\n\n > Signed-off-by: Bernd Kuhls \n\nCommitted, thanks.","headers":{"Return-Path":"","X-Original-To":["incoming@patchwork.ozlabs.org","buildroot@lists.busybox.net"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","buildroot@osuosl.org"],"Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=busybox.net\n\t(client-ip=140.211.166.133; helo=hemlock.osuosl.org;\n\tenvelope-from=buildroot-bounces@busybox.net;\n\treceiver=)","ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n\tunprotected) header.d=gmail.com header.i=@gmail.com\n\theader.b=\"M4yM1HHJ\"; dkim-atps=neutral"],"Received":["from hemlock.osuosl.org (smtp2.osuosl.org [140.211.166.133])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xySmz3vRDz9s7v\n\tfor ;\n\tThu, 21 Sep 2017 17:25:07 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby hemlock.osuosl.org (Postfix) with ESMTP id B4CAB889E0;\n\tThu, 21 Sep 2017 07:25:02 +0000 (UTC)","from hemlock.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id jNcyOCvP-KsA; Thu, 21 Sep 2017 07:25:01 +0000 (UTC)","from ash.osuosl.org (ash.osuosl.org [140.211.166.34])\n\tby hemlock.osuosl.org (Postfix) with ESMTP id D93868881A;\n\tThu, 21 Sep 2017 07:25:00 +0000 (UTC)","from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137])\n\tby ash.osuosl.org (Postfix) with ESMTP id 5937C1C0BBC\n\tfor ;\n\tThu, 21 Sep 2017 07:24:59 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n\tby fraxinus.osuosl.org (Postfix) with ESMTP id 543AC88BC6\n\tfor ;\n\tThu, 21 Sep 2017 07:24:59 +0000 (UTC)","from fraxinus.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id 32lhqq8I7iws for ;\n\tThu, 21 Sep 2017 07:24:58 +0000 (UTC)","from mail-wm0-f43.google.com (mail-wm0-f43.google.com\n\t[74.125.82.43])\n\tby fraxinus.osuosl.org (Postfix) with ESMTPS id 449E588BBA\n\tfor ; Thu, 21 Sep 2017 07:24:58 +0000 (UTC)","by mail-wm0-f43.google.com with SMTP id e71so12823472wmg.4\n\tfor ; Thu, 21 Sep 2017 00:24:58 -0700 (PDT)","from dell.be.48ers.dk (d51A5BC31.access.telenet.be.\n\t[81.165.188.49]) by smtp.gmail.com with ESMTPSA id\n\tx50sm556943edx.45.2017.09.21.00.24.55\n\t(version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256);\n\tThu, 21 Sep 2017 00:24:55 -0700 (PDT)","from peko by dell.be.48ers.dk with local (Exim 4.88)\n\t(envelope-from )\n\tid 1duvqx-0005Rm-1o; Thu, 21 Sep 2017 09:24:55 +0200"],"X-Virus-Scanned":["amavisd-new at osuosl.org","amavisd-new at osuosl.org"],"X-Greylist":"domain auto-whitelisted by SQLgrey-1.7.6","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;\n\th=sender:from:to:cc:subject:references:date:in-reply-to:message-id\n\t:user-agent:mime-version;\n\tbh=BHM/FAfa7Ko7GB3nBI3Ybf6HBE36u1Uj1xE3y45pUPc=;\n\tb=M4yM1HHJsecokSzM6Vqge4KCCgiSAoOn5V3pQEkYwZhhVCwon6h39H+59B8UsFrDaD\n\tkna9w3XCd0ExC4vrAmuq9CFns7XONXH3GAz7sbik011B6FDVcsSgirX6CAj4+K3ZcDzt\n\t41ZMI24plT/WkUIfAKtt5AaeJ54L0/7PhsCwS97y15DNNFMDcT7CRuIx9LNx8bdgY9gu\n\tfO4GF9OQI8WsNQSSZbxqdj7Hpr7Q2dAdoQBTw6G0MHVOzE7mmxWgMMcesOaO2/DGqmFn\n\tJNpa51NmNUkhRPy8ERRDc1DNXYmVgWATNz89e2v7P+2qvvwGPBzZRjwclkFIWv0MunLW\n\tbosQ==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20161025;\n\th=x-gm-message-state:sender:from:to:cc:subject:references:date\n\t:in-reply-to:message-id:user-agent:mime-version;\n\tbh=BHM/FAfa7Ko7GB3nBI3Ybf6HBE36u1Uj1xE3y45pUPc=;\n\tb=AnMLBwKSY2KdvxX21Nw9hZPZNtkHocb1a4w9eMHDwheS7R35mXQH63dYESPkR8d70x\n\tHBpdqujSohQfRII0XsAwLODxCnwB/PwVe7G2QLJJOCX2229BGXq49ep4zez2u+WAgJWw\n\tUCnxTsNQp3awe52D+4OwyWvnIpRYWZi9gsmvxxWYCpNgukyoJFIXUBy41oyv/FclqtW0\n\tlkAsuCkyZSN1K9uajXOrpJ9T30Dhi1+y6owFXsy780vMvumGDDZPDC20kSgf7yZ2rbsv\n\tv9qPtnNUsFdCWwAVOqSIMOa0PcZVUh/ZVtK5yEfMQpUWPCe+42S2KPZTGbwqjc66rDn/\n\tGFIg==","X-Gm-Message-State":"AHPjjUiCTjkgFWXVXE3WiCYdUmUydynkwH2734L0xDK8mI/5iJ+vFzUF\n\t3KKTSi0XRvQYccaryQtrTIU3zGnm","X-Google-Smtp-Source":"AOwi7QCJHFtz1uFDtNI1xvGm8OBFUQxIYrO870V+kJ3L1IpXZlATsnHvU+jDDZS628Wy9WhJXok4rQ==","X-Received":"by 10.80.164.238 with SMTP id x43mr101531edb.29.1505978696734;\n\tThu, 21 Sep 2017 00:24:56 -0700 (PDT)","From":"Peter Korsgaard ","To":"Bernd Kuhls ","References":"<20170920180943.7424-1-bernd.kuhls@t-online.de>","Date":"Thu, 21 Sep 2017 09:24:55 +0200","In-Reply-To":"<20170920180943.7424-1-bernd.kuhls@t-online.de> (Bernd Kuhls's\n\tmessage of \"Wed, 20 Sep 2017 20:09:43 +0200\")","Message-ID":"<87y3p8wm2g.fsf@dell.be.48ers.dk>","User-Agent":"Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux)","MIME-Version":"1.0","Cc":"buildroot@buildroot.org","Subject":"Re: [Buildroot] [PATCH 1/1] package/samba4: security bump to\n\tversion 4.6.8","X-BeenThere":"buildroot@busybox.net","X-Mailman-Version":"2.1.18-1","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n\t","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n\t","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@busybox.net","Sender":"\"buildroot\" "}},{"id":1787826,"web_url":"http://patchwork.ozlabs.org/comment/1787826/","msgid":"<87d15mpxbp.fsf@dell.be.48ers.dk>","list_archive_url":null,"date":"2017-10-16T22:00:42","subject":"Re: [Buildroot] [PATCH 1/1] package/samba4: security bump to\n\tversion 4.6.8","submitter":{"id":42365,"url":"http://patchwork.ozlabs.org/api/people/42365/","name":"Peter Korsgaard","email":"peter@korsgaard.com"},"content":">>>>> \"Bernd\" == Bernd Kuhls writes:\n\n > Release notes:\n > https://www.samba.org/samba/history/samba-4.6.8.html\n\n > Fixes\n > - CVE-2017-12150 (SMB1/2/3 connections may not require signing where\n > they should)\n > - CVE-2017-12151 (SMB3 connections don't keep encryption across DFS\n > redirects)\n > - CVE-2017-12163 (Server memory information leak over SMB1)\n\n > Signed-off-by: Bernd Kuhls \n\nCommitted to 2017.08.x, thanks.","headers":{"Return-Path":"","X-Original-To":["incoming@patchwork.ozlabs.org","buildroot@lists.busybox.net"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","buildroot@osuosl.org"],"Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=busybox.net\n\t(client-ip=140.211.166.136; helo=silver.osuosl.org;\n\tenvelope-from=buildroot-bounces@busybox.net;\n\treceiver=)","ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n\tunprotected) header.d=gmail.com header.i=@gmail.com\n\theader.b=\"V3fvEWEc\"; dkim-atps=neutral"],"Received":["from silver.osuosl.org (smtp3.osuosl.org [140.211.166.136])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3yGC1y2Sxmz9sRW\n\tfor ;\n\tTue, 17 Oct 2017 09:00:54 +1100 (AEDT)","from localhost (localhost [127.0.0.1])\n\tby silver.osuosl.org (Postfix) with ESMTP id 0B44D2F801;\n\tMon, 16 Oct 2017 22:00:52 +0000 (UTC)","from silver.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id wVwQpMKFxgKa; Mon, 16 Oct 2017 22:00:51 +0000 (UTC)","from ash.osuosl.org (ash.osuosl.org [140.211.166.34])\n\tby silver.osuosl.org (Postfix) with ESMTP id 77DB82D437;\n\tMon, 16 Oct 2017 22:00:48 +0000 (UTC)","from silver.osuosl.org (smtp3.osuosl.org [140.211.166.136])\n\tby ash.osuosl.org (Postfix) with ESMTP id C62C81C150F\n\tfor ;\n\tMon, 16 Oct 2017 22:00:46 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n\tby silver.osuosl.org (Postfix) with ESMTP id BF66D2D437\n\tfor ;\n\tMon, 16 Oct 2017 22:00:46 +0000 (UTC)","from silver.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id 6ilPwNMsSF9F for ;\n\tMon, 16 Oct 2017 22:00:46 +0000 (UTC)","from mail-wm0-f49.google.com (mail-wm0-f49.google.com\n\t[74.125.82.49])\n\tby silver.osuosl.org (Postfix) with ESMTPS id F2E5F263FB\n\tfor ; Mon, 16 Oct 2017 22:00:45 +0000 (UTC)","by mail-wm0-f49.google.com with SMTP id m72so153184wmc.1\n\tfor ; Mon, 16 Oct 2017 15:00:45 -0700 (PDT)","from dell.be.48ers.dk (d51a5bc31.access.telenet.be.\n\t[81.165.188.49]) by smtp.gmail.com with ESMTPSA id\n\t23sm5119770edx.8.2017.10.16.15.00.43\n\t(version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256);\n\tMon, 16 Oct 2017 15:00:43 -0700 (PDT)","from peko by dell.be.48ers.dk with local (Exim 4.88)\n\t(envelope-from )\n\tid 1e4DRC-0003aZ-FW; Tue, 17 Oct 2017 00:00:42 +0200"],"X-Virus-Scanned":["amavisd-new at osuosl.org","amavisd-new at osuosl.org"],"X-Greylist":"domain auto-whitelisted by SQLgrey-1.7.6","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;\n\th=sender:from:to:cc:subject:references:date:in-reply-to:message-id\n\t:user-agent:mime-version;\n\tbh=J/lnrAi6r6O6aQUbS4IHtiT9Pc79nmBJvXcqQ7E+DDs=;\n\tb=V3fvEWEcp1GwGiEjap73p7mk9ne0hck39HjN0kc999mPVMBwjK542N+Rbo/PI1csDQ\n\t1LJAXTjEa392f53Z3CSz8Klahe18lSqyBWdUZentJfHgp5/z7kczbAA3p+Hmf5DmdNgF\n\tEHpsG6qlYVruJ2KT5WFW0KJdA+oZM6u8FZVhbaFZOhx0Zci+CWKGItdpq5uO3a7o2Q+v\n\tSMxRIz3bJJlZiTP+T5Mq6QXFBDAauMXSK07E5VipVph7RVyWx7SP4uMrGiEQHfwngQxy\n\tv1v4lMhusGipnr375bBI+O6hoTwbLryrNZEBdLhs0bs76tbeGYk4jqoRA5iELWnQzcLn\n\t0HFQ==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20161025;\n\th=x-gm-message-state:sender:from:to:cc:subject:references:date\n\t:in-reply-to:message-id:user-agent:mime-version;\n\tbh=J/lnrAi6r6O6aQUbS4IHtiT9Pc79nmBJvXcqQ7E+DDs=;\n\tb=QB2ADa+S8tJmPWz0M45fLg/f/pCiLD2RBYAUiuEEKLxz88N7xdArmC4J2OgaUMwMfw\n\txr/VQmTNUe1Xp4pvXn7JwDpGfrzZwzzZmwHveCxd1xPp5Q1phb92ewEH/p+RX+jXcTB3\n\tfajNST9aQjP1SpQdUr766XzhuUHpopF11a5MUrM8Vj8UGJSUtnZcU9tWzywktlN4hZZ4\n\tMvtqNqUDSZg3Rl+YH5VgO7vHYcjNLYTMDqlCMLweKUKPAs8zyuJA0fWC0KRepkvN1MTL\n\tPKQxRwlSl9h0hInHTQywT/sG8dI4TDJug62cYipm7zMTqkZQrz9s/kw6fXKtwL0IKexj\n\tQrQA==","X-Gm-Message-State":"AMCzsaUqOoxQG/WlLXSn1wjh0fvo7NdJag0cdy/ayCkHroXIuzmbTurH\n\tO2YFQ45bvuyfpD0zG2b3ND0=","X-Google-Smtp-Source":"AOwi7QCyG5ETOZlgdjEYkrM/I0e8wownku2iAM/RH8sAouVMBjWutBE55cWpntOnm+7pWZ+W+VZBYg==","X-Received":"by 10.80.154.35 with SMTP id o32mr14422805edb.125.1508191244509; \n\tMon, 16 Oct 2017 15:00:44 -0700 (PDT)","From":"Peter Korsgaard ","To":"Bernd Kuhls ","References":"<20170920180943.7424-1-bernd.kuhls@t-online.de>","Date":"Tue, 17 Oct 2017 00:00:42 +0200","In-Reply-To":"<20170920180943.7424-1-bernd.kuhls@t-online.de> (Bernd Kuhls's\n\tmessage of \"Wed, 20 Sep 2017 20:09:43 +0200\")","Message-ID":"<87d15mpxbp.fsf@dell.be.48ers.dk>","User-Agent":"Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux)","MIME-Version":"1.0","Cc":"buildroot@buildroot.org","Subject":"Re: [Buildroot] [PATCH 1/1] package/samba4: security bump to\n\tversion 4.6.8","X-BeenThere":"buildroot@busybox.net","X-Mailman-Version":"2.1.18-1","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n\t","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n\t","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@busybox.net","Sender":"\"buildroot\" "}}]