summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
author Patrick J Volkerding <volkerdi@slackware.com>2022-12-17 21:14:11 +0000
committer Eric Hameleers <alien@slackware.com>2022-12-18 13:30:08 +0100
commit373b059753b761e52363e4975eaf3ee60d9abe2a (patch)
treed7e556148de03973da8a9f96e455bcc01330e5f4
parentb5eac9957be4752168e21dd2ff7c280a05d7e76f (diff)
downloadcurrent-20221217211411_15.0.tar.gz
current-20221217211411_15.0.tar.xz
Sat Dec 17 21:14:11 UTC 202220221217211411_15.0
patches/packages/samba-4.15.13-x86_64-1_slack15.0.txz: Upgraded. This update fixes security issues: This is the Samba CVE for the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability disclosed by Microsoft on Nov 8 2022. A Samba Active Directory DC will issue weak rc4-hmac session keys for use between modern clients and servers despite all modern Kerberos implementations supporting the aes256-cts-hmac-sha1-96 cipher. On Samba Active Directory DCs and members 'kerberos encryption types = legacy' would force rc4-hmac as a client even if the server supports aes128-cts-hmac-sha1-96 and/or aes256-cts-hmac-sha1-96. This is the Samba CVE for the Windows Kerberos Elevation of Privilege Vulnerability disclosed by Microsoft on Nov 8 2022. A service account with the special constrained delegation permission could forge a more powerful ticket than the one it was presented with. The "RC4" protection of the NetLogon Secure channel uses the same algorithms as rc4-hmac cryptography in Kerberos, and so must also be assumed to be weak. Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96). Note that there are several important behavior changes included in this release, which may cause compatibility problems interacting with system still expecting the former behavior. Please read the advisories of CVE-2022-37966, CVE-2022-37967 and CVE-2022-38023 carefully! For more information, see: https://www.samba.org/samba/security/CVE-2022-37966.html https://www.samba.org/samba/security/CVE-2022-37967.html https://www.samba.org/samba/security/CVE-2022-38023.html https://www.samba.org/samba/security/CVE-2022-45141.html https://www.cve.org/CVERecord?id=CVE-2022-37966 https://www.cve.org/CVERecord?id=CVE-2022-37967 https://www.cve.org/CVERecord?id=CVE-2022-38023 https://www.cve.org/CVERecord?id=CVE-2022-45141 (* Security fix *)
Diffstat
-rw-r--r--ChangeLog.rss52
-rw-r--r--ChangeLog.txt40
-rw-r--r--FILELIST.TXT42
-rw-r--r--patches/packages/samba-4.15.13-x86_64-1_slack15.0.txt (renamed from patches/packages/samba-4.15.12-x86_64-1_slack15.0.txt)0
-rw-r--r--patches/source/samba/samba.url4
5 files changed, 113 insertions, 25 deletions
diff --git a/ChangeLog.rss b/ChangeLog.rss
index 967c2b557..adde38e79 100644
--- a/ChangeLog.rss
+++ b/ChangeLog.rss
@@ -11,10 +11,58 @@
<description>Tracking Slackware development in git.</description>
<language>en-us</language>
<id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id>
- <pubDate>Wed, 14 Dec 2022 21:19:34 GMT</pubDate>
- <lastBuildDate>Thu, 15 Dec 2022 12:30:40 GMT</lastBuildDate>
+ <pubDate>Sat, 17 Dec 2022 21:14:11 GMT</pubDate>
+ <lastBuildDate>Sun, 18 Dec 2022 12:29:56 GMT</lastBuildDate>
<generator>maintain_current_git.sh v 1.17</generator>
<item>
+ <title>Sat, 17 Dec 2022 21:14:11 GMT</title>
+ <pubDate>Sat, 17 Dec 2022 21:14:11 GMT</pubDate>
+ <link>https://git.slackware.nl/current/tag/?h=20221217211411</link>
+ <guid isPermaLink="false">20221217211411</guid>
+ <description>
+ <![CDATA[<pre>
+patches/packages/samba-4.15.13-x86_64-1_slack15.0.txz: Upgraded.
+ This update fixes security issues:
+ This is the Samba CVE for the Windows Kerberos RC4-HMAC Elevation of
+ Privilege Vulnerability disclosed by Microsoft on Nov 8 2022.
+ A Samba Active Directory DC will issue weak rc4-hmac session keys for
+ use between modern clients and servers despite all modern Kerberos
+ implementations supporting the aes256-cts-hmac-sha1-96 cipher.
+ On Samba Active Directory DCs and members
+ 'kerberos encryption types = legacy'
+ would force rc4-hmac as a client even if the server supports
+ aes128-cts-hmac-sha1-96 and/or aes256-cts-hmac-sha1-96.
+ This is the Samba CVE for the Windows Kerberos Elevation of Privilege
+ Vulnerability disclosed by Microsoft on Nov 8 2022.
+ A service account with the special constrained delegation permission
+ could forge a more powerful ticket than the one it was presented with.
+ The "RC4" protection of the NetLogon Secure channel uses the same
+ algorithms as rc4-hmac cryptography in Kerberos, and so must also be
+ assumed to be weak.
+ Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
+ was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed
+ that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue
+ rc4-hmac encrypted tickets despite the target server supporting better
+ encryption (eg aes256-cts-hmac-sha1-96).
+ Note that there are several important behavior changes included in this
+ release, which may cause compatibility problems interacting with system
+ still expecting the former behavior.
+ Please read the advisories of CVE-2022-37966, CVE-2022-37967 and
+ CVE-2022-38023 carefully!
+ For more information, see:
+ https://www.samba.org/samba/security/CVE-2022-37966.html
+ https://www.samba.org/samba/security/CVE-2022-37967.html
+ https://www.samba.org/samba/security/CVE-2022-38023.html
+ https://www.samba.org/samba/security/CVE-2022-45141.html
+ https://www.cve.org/CVERecord?id=CVE-2022-37966
+ https://www.cve.org/CVERecord?id=CVE-2022-37967
+ https://www.cve.org/CVERecord?id=CVE-2022-38023
+ https://www.cve.org/CVERecord?id=CVE-2022-45141
+ (* Security fix *)
+ </pre>]]>
+ </description>
+ </item>
+ <item>
<title>Wed, 14 Dec 2022 21:19:34 GMT</title>
<pubDate>Wed, 14 Dec 2022 21:19:34 GMT</pubDate>
<link>https://git.slackware.nl/current/tag/?h=20221214211934</link>
diff --git a/ChangeLog.txt b/ChangeLog.txt
index fa4474bd3..91e0f8606 100644
--- a/ChangeLog.txt
+++ b/ChangeLog.txt
@@ -1,3 +1,43 @@
+Sat Dec 17 21:14:11 UTC 2022
+patches/packages/samba-4.15.13-x86_64-1_slack15.0.txz: Upgraded.
+ This update fixes security issues:
+ This is the Samba CVE for the Windows Kerberos RC4-HMAC Elevation of
+ Privilege Vulnerability disclosed by Microsoft on Nov 8 2022.
+ A Samba Active Directory DC will issue weak rc4-hmac session keys for
+ use between modern clients and servers despite all modern Kerberos
+ implementations supporting the aes256-cts-hmac-sha1-96 cipher.
+ On Samba Active Directory DCs and members
+ 'kerberos encryption types = legacy'
+ would force rc4-hmac as a client even if the server supports
+ aes128-cts-hmac-sha1-96 and/or aes256-cts-hmac-sha1-96.
+ This is the Samba CVE for the Windows Kerberos Elevation of Privilege
+ Vulnerability disclosed by Microsoft on Nov 8 2022.
+ A service account with the special constrained delegation permission
+ could forge a more powerful ticket than the one it was presented with.
+ The "RC4" protection of the NetLogon Secure channel uses the same
+ algorithms as rc4-hmac cryptography in Kerberos, and so must also be
+ assumed to be weak.
+ Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
+ was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed
+ that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue
+ rc4-hmac encrypted tickets despite the target server supporting better
+ encryption (eg aes256-cts-hmac-sha1-96).
+ Note that there are several important behavior changes included in this
+ release, which may cause compatibility problems interacting with system
+ still expecting the former behavior.
+ Please read the advisories of CVE-2022-37966, CVE-2022-37967 and
+ CVE-2022-38023 carefully!
+ For more information, see:
+ https://www.samba.org/samba/security/CVE-2022-37966.html
+ https://www.samba.org/samba/security/CVE-2022-37967.html
+ https://www.samba.org/samba/security/CVE-2022-38023.html
+ https://www.samba.org/samba/security/CVE-2022-45141.html
+ https://www.cve.org/CVERecord?id=CVE-2022-37966
+ https://www.cve.org/CVERecord?id=CVE-2022-37967
+ https://www.cve.org/CVERecord?id=CVE-2022-38023
+ https://www.cve.org/CVERecord?id=CVE-2022-45141
+ (* Security fix *)
++--------------------------+
Wed Dec 14 21:19:34 UTC 2022
patches/packages/mozilla-firefox-102.6.0esr-x86_64-1_slack15.0.txz: Upgraded.
This update contains security fixes and improvements.
diff --git a/FILELIST.TXT b/FILELIST.TXT
index 0903a9a63..0a53331b2 100644
--- a/FILELIST.TXT
+++ b/FILELIST.TXT
@@ -1,20 +1,20 @@
-Wed Dec 14 21:23:51 UTC 2022
+Sat Dec 17 21:16:44 UTC 2022
Here is the file list for this directory. If you are using a
mirror site and find missing or extra files in the disk
subdirectories, please have the archive administrator refresh
the mirror.
-drwxr-xr-x 12 root root 4096 2022-12-14 21:19 .
+drwxr-xr-x 12 root root 4096 2022-12-17 21:14 .
-rw-r--r-- 1 root root 5767 2022-02-02 22:44 ./ANNOUNCE.15.0
-rw-r--r-- 1 root root 16609 2022-03-30 19:03 ./CHANGES_AND_HINTS.TXT
--rw-r--r-- 1 root root 1162736 2022-12-09 19:48 ./CHECKSUMS.md5
--rw-r--r-- 1 root root 163 2022-12-09 19:48 ./CHECKSUMS.md5.asc
+-rw-r--r-- 1 root root 1163940 2022-12-14 21:24 ./CHECKSUMS.md5
+-rw-r--r-- 1 root root 163 2022-12-14 21:24 ./CHECKSUMS.md5.asc
-rw-r--r-- 1 root root 17976 1994-06-10 02:28 ./COPYING
-rw-r--r-- 1 root root 35147 2007-06-30 04:21 ./COPYING3
-rw-r--r-- 1 root root 19573 2016-06-23 20:08 ./COPYRIGHT.TXT
-rw-r--r-- 1 root root 616 2006-10-02 04:37 ./CRYPTO_NOTICE.TXT
--rw-r--r-- 1 root root 1965872 2022-12-14 21:19 ./ChangeLog.txt
+-rw-r--r-- 1 root root 1968131 2022-12-17 21:14 ./ChangeLog.txt
drwxr-xr-x 3 root root 4096 2013-03-20 22:17 ./EFI
drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT
-rw-r--r-- 1 root root 1187840 2021-06-15 19:16 ./EFI/BOOT/bootx64.efi
@@ -25,7 +25,7 @@ drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT
-rwxr-xr-x 1 root root 2504 2019-07-05 18:54 ./EFI/BOOT/make-grub.sh
-rw-r--r-- 1 root root 10722 2013-09-21 19:02 ./EFI/BOOT/osdetect.cfg
-rw-r--r-- 1 root root 1273 2013-08-12 21:08 ./EFI/BOOT/tools.cfg
--rw-r--r-- 1 root root 1518947 2022-12-09 19:47 ./FILELIST.TXT
+-rw-r--r-- 1 root root 1520358 2022-12-14 21:23 ./FILELIST.TXT
-rw-r--r-- 1 root root 1572 2012-08-29 18:27 ./GPG-KEY
-rw-r--r-- 1 root root 864745 2022-02-02 08:25 ./PACKAGES.TXT
-rw-r--r-- 1 root root 8034 2022-02-02 03:36 ./README.TXT
@@ -738,13 +738,13 @@ drwxr-xr-x 2 root root 4096 2008-05-07 05:21 ./pasture/source/php/pear
-rwxr-xr-x 1 root root 9448 2018-05-16 22:38 ./pasture/source/php/php.SlackBuild
-rw-r--r-- 1 root root 775 2017-07-07 19:25 ./pasture/source/php/php.ini-development.diff.gz
-rw-r--r-- 1 root root 830 2005-12-09 05:18 ./pasture/source/php/slack-desc
-drwxr-xr-x 4 root root 4096 2022-12-14 21:23 ./patches
--rw-r--r-- 1 root root 58727 2022-12-14 21:23 ./patches/CHECKSUMS.md5
--rw-r--r-- 1 root root 163 2022-12-14 21:23 ./patches/CHECKSUMS.md5.asc
--rw-r--r-- 1 root root 79234 2022-12-14 21:23 ./patches/FILE_LIST
--rw-r--r-- 1 root root 11890336 2022-12-14 21:23 ./patches/MANIFEST.bz2
--rw-r--r-- 1 root root 42425 2022-12-14 21:23 ./patches/PACKAGES.TXT
-drwxr-xr-x 3 root root 16384 2022-12-14 21:23 ./patches/packages
+drwxr-xr-x 4 root root 4096 2022-12-17 21:16 ./patches
+-rw-r--r-- 1 root root 58727 2022-12-17 21:16 ./patches/CHECKSUMS.md5
+-rw-r--r-- 1 root root 163 2022-12-17 21:16 ./patches/CHECKSUMS.md5.asc
+-rw-r--r-- 1 root root 79234 2022-12-17 21:16 ./patches/FILE_LIST
+-rw-r--r-- 1 root root 11887756 2022-12-17 21:16 ./patches/MANIFEST.bz2
+-rw-r--r-- 1 root root 42425 2022-12-17 21:16 ./patches/PACKAGES.TXT
+drwxr-xr-x 3 root root 20480 2022-12-17 21:16 ./patches/packages
-rw-r--r-- 1 root root 327 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txt
-rw-r--r-- 1 root root 10716 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz
-rw-r--r-- 1 root root 163 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz.asc
@@ -896,9 +896,9 @@ drwxr-xr-x 2 root root 4096 2022-11-29 21:00 ./patches/packages/linux-5.15
-rw-r--r-- 1 root root 385 2022-11-24 20:10 ./patches/packages/ruby-3.0.5-x86_64-1_slack15.0.txt
-rw-r--r-- 1 root root 7740336 2022-11-24 20:10 ./patches/packages/ruby-3.0.5-x86_64-1_slack15.0.txz
-rw-r--r-- 1 root root 163 2022-11-24 20:10 ./patches/packages/ruby-3.0.5-x86_64-1_slack15.0.txz.asc
--rw-r--r-- 1 root root 507 2022-11-17 01:46 ./patches/packages/samba-4.15.12-x86_64-1_slack15.0.txt
--rw-r--r-- 1 root root 12970372 2022-11-17 01:46 ./patches/packages/samba-4.15.12-x86_64-1_slack15.0.txz
--rw-r--r-- 1 root root 163 2022-11-17 01:46 ./patches/packages/samba-4.15.12-x86_64-1_slack15.0.txz.asc
+-rw-r--r-- 1 root root 507 2022-12-17 19:58 ./patches/packages/samba-4.15.13-x86_64-1_slack15.0.txt
+-rw-r--r-- 1 root root 13030204 2022-12-17 19:58 ./patches/packages/samba-4.15.13-x86_64-1_slack15.0.txz
+-rw-r--r-- 1 root root 163 2022-12-17 19:58 ./patches/packages/samba-4.15.13-x86_64-1_slack15.0.txz.asc
-rw-r--r-- 1 root root 392 2022-09-29 20:19 ./patches/packages/seamonkey-2.53.14-x86_64-1_slack15.0.txt
-rw-r--r-- 1 root root 38098032 2022-09-29 20:19 ./patches/packages/seamonkey-2.53.14-x86_64-1_slack15.0.txz
-rw-r--r-- 1 root root 163 2022-09-29 20:19 ./patches/packages/seamonkey-2.53.14-x86_64-1_slack15.0.txz.asc
@@ -947,7 +947,7 @@ drwxr-xr-x 2 root root 4096 2022-11-29 21:00 ./patches/packages/linux-5.15
-rw-r--r-- 1 root root 388 2022-10-15 04:05 ./patches/packages/zlib-1.2.13-x86_64-1_slack15.0.txt
-rw-r--r-- 1 root root 105356 2022-10-15 04:05 ./patches/packages/zlib-1.2.13-x86_64-1_slack15.0.txz
-rw-r--r-- 1 root root 163 2022-10-15 04:05 ./patches/packages/zlib-1.2.13-x86_64-1_slack15.0.txz.asc
-drwxr-xr-x 59 root root 4096 2022-12-14 21:16 ./patches/source
+drwxr-xr-x 59 root root 4096 2022-12-17 21:12 ./patches/source
drwxr-xr-x 2 root root 4096 2022-01-16 05:07 ./patches/source/aaa_base
-rw-r--r-- 1 root root 11041 2022-02-15 04:49 ./patches/source/aaa_base/_aaa_base.tar.gz
-rwxr-xr-x 1 root root 3894 2022-02-15 05:07 ./patches/source/aaa_base/aaa_base.SlackBuild
@@ -1417,14 +1417,14 @@ drwxr-xr-x 2 root root 4096 2022-11-24 20:07 ./patches/source/ruby
-rw-r--r-- 1 root root 15531585 2022-11-24 13:05 ./patches/source/ruby/ruby-3.0.5.tar.lz
-rwxr-xr-x 1 root root 4817 2022-04-13 18:14 ./patches/source/ruby/ruby.SlackBuild
-rw-r--r-- 1 root root 837 2019-03-13 16:43 ./patches/source/ruby/slack-desc
-drwxr-xr-x 2 root root 4096 2022-11-16 19:16 ./patches/source/samba
+drwxr-xr-x 2 root root 4096 2022-12-17 19:52 ./patches/source/samba
-rw-r--r-- 1 root root 703 2016-06-13 04:19 ./patches/source/samba/doinst.sh.gz
-rw-r--r-- 1 root root 940 2016-06-04 17:50 ./patches/source/samba/rc.samba
--rw-r--r-- 1 root root 833 2022-11-15 07:22 ./patches/source/samba/samba-4.15.12.tar.asc
--rw-r--r-- 1 root root 11910047 2022-11-15 07:22 ./patches/source/samba/samba-4.15.12.tar.lz
+-rw-r--r-- 1 root root 833 2022-12-15 16:08 ./patches/source/samba/samba-4.15.13.tar.asc
+-rw-r--r-- 1 root root 11925267 2022-12-15 16:08 ./patches/source/samba/samba-4.15.13.tar.lz
-rwxr-xr-x 1 root root 7654 2022-05-02 18:04 ./patches/source/samba/samba.SlackBuild
-rw-r--r-- 1 root root 227 2019-02-06 20:36 ./patches/source/samba/samba.libsmbclient.h.ffmpeg.compat.diff.gz
--rw-r--r-- 1 root root 131 2022-10-25 16:46 ./patches/source/samba/samba.url
+-rw-r--r-- 1 root root 131 2022-12-17 19:52 ./patches/source/samba/samba.url
-rw-r--r-- 1 root root 960 2018-02-27 06:13 ./patches/source/samba/slack-desc
-rw-r--r-- 1 root root 7921 2018-04-29 17:31 ./patches/source/samba/smb.conf.default
-rw-r--r-- 1 root root 7933 2018-01-14 20:41 ./patches/source/samba/smb.conf.default.orig
diff --git a/patches/packages/samba-4.15.12-x86_64-1_slack15.0.txt b/patches/packages/samba-4.15.13-x86_64-1_slack15.0.txt
index e1800f156..e1800f156 100644
--- a/patches/packages/samba-4.15.12-x86_64-1_slack15.0.txt
+++ b/patches/packages/samba-4.15.13-x86_64-1_slack15.0.txt
diff --git a/patches/source/samba/samba.url b/patches/source/samba/samba.url
index 66a8df80d..cbd5b0980 100644
--- a/patches/source/samba/samba.url
+++ b/patches/source/samba/samba.url
@@ -1,2 +1,2 @@
-https://download.samba.org/pub/samba/stable/samba-4.15.11.tar.gz
-https://download.samba.org/pub/samba/stable/samba-4.15.11.tar.asc
+https://download.samba.org/pub/samba/stable/samba-4.15.13.tar.gz
+https://download.samba.org/pub/samba/stable/samba-4.15.13.tar.asc
generated by cgit v1.2.3 (git 2.26.2) at 2024-05-04 16:17:37 +0000