From patchwork Thu Oct 29 21:43:13 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bernd Kuhls X-Patchwork-Id: 1390375 Return-Path: X-Original-To: incoming-buildroot@patchwork.ozlabs.org Delivered-To: patchwork-incoming-buildroot@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=busybox.net (client-ip=140.211.166.138; helo=whitealder.osuosl.org; envelope-from=buildroot-bounces@busybox.net; receiver=) Authentication-Results: ozlabs.org; dmarc=none (p=none dis=none) header.from=t-online.de Received: from whitealder.osuosl.org (smtp1.osuosl.org [140.211.166.138]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 4CMf801FbNz9sPB for ; Fri, 30 Oct 2020 08:43:28 +1100 (AEDT) Received: from localhost (localhost [127.0.0.1]) by whitealder.osuosl.org (Postfix) with ESMTP id BAA2A86CBD; Thu, 29 Oct 2020 21:43:25 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from whitealder.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Osf7jEtOWJCp; Thu, 29 Oct 2020 21:43:24 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by whitealder.osuosl.org (Postfix) with ESMTP id E25B186CAB; Thu, 29 Oct 2020 21:43:23 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137]) by ash.osuosl.org (Postfix) with ESMTP id E97861BF3F4 for ; Thu, 29 Oct 2020 21:43:21 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by fraxinus.osuosl.org (Postfix) with ESMTP id E63B286BAD for ; Thu, 29 Oct 2020 21:43:21 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from fraxinus.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fBBRgJrXm8Xl for ; Thu, 29 Oct 2020 21:43:20 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mailout06.t-online.de (mailout06.t-online.de [194.25.134.19]) by fraxinus.osuosl.org (Postfix) with ESMTPS id 891C086B11 for ; Thu, 29 Oct 2020 21:43:20 +0000 (UTC) Received: from fwd15.aul.t-online.de (fwd15.aul.t-online.de [172.20.27.63]) by mailout06.t-online.de (Postfix) with SMTP id ADBA4410FC6D for ; Thu, 29 Oct 2020 22:43:18 +0100 (CET) Received: from fli4l.lan.fli4l (bHcoFOZGQh-4-kj7asA2j-6cYBTMpfMS-Y76BBHTBpk5WBfc5mYNHE4x35wb4FnwJY@[79.214.202.117]) by fwd15.t-online.de with (TLSv1:ECDHE-RSA-AES256-SHA encrypted) esmtp id 1kYFhS-48N52e0; Thu, 29 Oct 2020 22:43:14 +0100 Received: from mahler.lan.fli4l ([192.168.1.1]:55018) by fli4l.lan.fli4l with esmtp (Exim 4.94) (envelope-from ) id 1kYFhR-00060h-IS for buildroot@buildroot.org; Thu, 29 Oct 2020 22:43:13 +0100 From: Bernd Kuhls To: buildroot@buildroot.org Date: Thu, 29 Oct 2020 22:43:13 +0100 Message-Id: <20201029214313.1570859-1-bernd.kuhls@t-online.de> X-Mailer: git-send-email 2.27.0 MIME-Version: 1.0 X-ID: bHcoFOZGQh-4-kj7asA2j-6cYBTMpfMS-Y76BBHTBpk5WBfc5mYNHE4x35wb4FnwJY X-TOI-EXPURGATEID: 150726::1604007794-0000E7A1-69F182E3/0/0 CLEAN NORMAL X-TOI-MSGID: 984aa1dc-ea6d-4c8e-8f9c-4e31b08df971 Subject: [Buildroot] [PATCH 1/1] package/samba4: security bump version to 4.11.15 X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: buildroot-bounces@busybox.net Sender: "buildroot" Fixes o CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify. o CVE-2020-14323: Unprivileged user can crash winbind. o CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records. Release notes: https://www.samba.org/samba/history/samba-4.11.14.html (bugfix-only) https://www.samba.org/samba/history/samba-4.11.15.html Signed-off-by: Bernd Kuhls --- package/samba4/samba4.hash | 4 ++-- package/samba4/samba4.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/samba4/samba4.hash b/package/samba4/samba4.hash index 4d47871fc5..0ce22a8526 100644 --- a/package/samba4/samba4.hash +++ b/package/samba4/samba4.hash @@ -1,4 +1,4 @@ # Locally calculated after checking pgp signature -# https://download.samba.org/pub/samba/stable/samba-4.11.13.tar.asc -sha256 e71ed29ae01c5ce7be8cee1f53e0530db86dd19b911accb08fae60224e686ba1 samba-4.11.13.tar.gz +# https://download.samba.org/pub/samba/stable/samba-4.11.15.tar.asc +sha256 922d461bb2e6e490cf7708b297a9312ea6cda1edc7bdfea4ee665f45ff99038a samba-4.11.15.tar.gz sha256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903 COPYING diff --git a/package/samba4/samba4.mk b/package/samba4/samba4.mk index 48ac48c180..51ee2c9c39 100644 --- a/package/samba4/samba4.mk +++ b/package/samba4/samba4.mk @@ -4,7 +4,7 @@ # ################################################################################ -SAMBA4_VERSION = 4.11.13 +SAMBA4_VERSION = 4.11.15 SAMBA4_SITE = https://download.samba.org/pub/samba/stable SAMBA4_SOURCE = samba-$(SAMBA4_VERSION).tar.gz SAMBA4_INSTALL_STAGING = YES