diff mbox

samba4: security bump to version 4.3.6

Message ID 1457472680-16241-1-git-send-email-gustavo@zacarias.com.ar
State Accepted
Commit 52be26e90c08caf78617deb4f1af6746af0f5b95
Headers show

Commit Message

Gustavo Zacarias March 8, 2016, 9:31 p.m. UTC
Fixes:
CVE-2015-7560 - Authenticated client could cause Samba to overwrite ACLs
with incorrect owner/group.
CVE-2016-0771 - Malicious request can cause the Samba internal DNS
server to crash or unintentionally return uninitialized memory.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
---
 package/samba4/samba4.hash | 2 +-
 package/samba4/samba4.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

Comments

Peter Korsgaard March 8, 2016, 9:33 p.m. UTC | #1
>>>>> "Gustavo" == Gustavo Zacarias <gustavo@zacarias.com.ar> writes:

 > Fixes:
 > CVE-2015-7560 - Authenticated client could cause Samba to overwrite ACLs
 > with incorrect owner/group.
 > CVE-2016-0771 - Malicious request can cause the Samba internal DNS
 > server to crash or unintentionally return uninitialized memory.

 > Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>

Committed, thanks.
diff mbox

Patch

diff --git a/package/samba4/samba4.hash b/package/samba4/samba4.hash
index 1b53657..d8458e6 100644
--- a/package/samba4/samba4.hash
+++ b/package/samba4/samba4.hash
@@ -1,2 +1,2 @@ 
 # Locally calculated after checking pgp signature
-sha256	583f927a823b272757fd4df0be267bd20a223b06cfc3c662df17e4870f14bf1c	samba-4.3.5.tar.gz
+sha256	3251eca5b196854e79978f4a92d5fd2b55bd7b0a252a65131a9be02be6754924	samba-4.3.6.tar.gz
diff --git a/package/samba4/samba4.mk b/package/samba4/samba4.mk
index 715983e..ee0452e 100644
--- a/package/samba4/samba4.mk
+++ b/package/samba4/samba4.mk
@@ -4,7 +4,7 @@ 
 #
 ################################################################################
 
-SAMBA4_VERSION = 4.3.5
+SAMBA4_VERSION = 4.3.6
 SAMBA4_SITE = http://ftp.samba.org/pub/samba/stable
 SAMBA4_SOURCE = samba-$(SAMBA4_VERSION).tar.gz
 SAMBA4_INSTALL_STAGING = YES