diff options
author | Patrick J Volkerding <volkerdi@slackware.com> | 2022-07-27 19:17:38 +0000 |
---|---|---|
committer | Eric Hameleers <alien@slackware.com> | 2022-07-28 07:00:16 +0200 |
commit | f5b23a008bdf2abee1c6e082b9a74ca075cdb9ec (patch) | |
tree | 3b1f8d944f1bff0b17d50d3f7f54e4ec138216d2 | |
parent | dbcd8c770799465743aec47da508a7162c7e70db (diff) | |
download | current-f5b23a008bdf2abee1c6e082b9a74ca075cdb9ec.tar.gz current-f5b23a008bdf2abee1c6e082b9a74ca075cdb9ec.tar.xz |
Wed Jul 27 19:17:38 UTC 202220220727191738
l/tevent-0.13.0-x86_64-1.txz: Upgraded.
n/samba-4.16.4-x86_64-1.txz: Upgraded.
This update fixes the following security issues:
Samba AD users can bypass certain restrictions associated with changing
passwords.
Samba AD users can forge password change requests for any user.
Samba AD users can crash the server process with an LDAP add or modify
request.
Samba AD users can induce a use-after-free in the server process with an
LDAP add or modify request.
Server memory information leak via SMB1.
For more information, see:
https://www.samba.org/samba/security/CVE-2022-2031.html
https://www.samba.org/samba/security/CVE-2022-32744.html
https://www.samba.org/samba/security/CVE-2022-32745.html
https://www.samba.org/samba/security/CVE-2022-32746.html
https://www.samba.org/samba/security/CVE-2022-32742.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2031
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32744
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32745
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32746
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32742
(* Security fix *)
-rw-r--r-- | ChangeLog.rss | 37 | ||||
-rw-r--r-- | ChangeLog.txt | 25 | ||||
-rw-r--r-- | FILELIST.TXT | 64 | ||||
-rw-r--r-- | source/n/samba/samba.url | 4 |
4 files changed, 94 insertions, 36 deletions
diff --git a/ChangeLog.rss b/ChangeLog.rss index b851f14de..c633192ea 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,10 +11,43 @@ <description>Tracking Slackware development in git.</description> <language>en-us</language> <id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id> - <pubDate>Tue, 26 Jul 2022 19:27:53 GMT</pubDate> - <lastBuildDate>Wed, 27 Jul 2022 05:00:17 GMT</lastBuildDate> + <pubDate>Wed, 27 Jul 2022 19:17:38 GMT</pubDate> + <lastBuildDate>Thu, 28 Jul 2022 05:00:14 GMT</lastBuildDate> <generator>maintain_current_git.sh v 1.17</generator> <item> + <title>Wed, 27 Jul 2022 19:17:38 GMT</title> + <pubDate>Wed, 27 Jul 2022 19:17:38 GMT</pubDate> + <link>https://git.slackware.nl/current/tag/?h=20220727191738</link> + <guid isPermaLink="false">20220727191738</guid> + <description> + <![CDATA[<pre> +l/tevent-0.13.0-x86_64-1.txz: Upgraded. +n/samba-4.16.4-x86_64-1.txz: Upgraded. + This update fixes the following security issues: + Samba AD users can bypass certain restrictions associated with changing + passwords. + Samba AD users can forge password change requests for any user. + Samba AD users can crash the server process with an LDAP add or modify + request. + Samba AD users can induce a use-after-free in the server process with an + LDAP add or modify request. + Server memory information leak via SMB1. + For more information, see: + https://www.samba.org/samba/security/CVE-2022-2031.html + https://www.samba.org/samba/security/CVE-2022-32744.html + https://www.samba.org/samba/security/CVE-2022-32745.html + https://www.samba.org/samba/security/CVE-2022-32746.html + https://www.samba.org/samba/security/CVE-2022-32742.html + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2031 + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32744 + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32745 + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32746 + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32742 + (* Security fix *) + </pre>]]> + </description> + </item> + <item> <title>Tue, 26 Jul 2022 19:27:53 GMT</title> <pubDate>Tue, 26 Jul 2022 19:27:53 GMT</pubDate> <link>https://git.slackware.nl/current/tag/?h=20220726192753</link> diff --git a/ChangeLog.txt b/ChangeLog.txt index e7090232b..d780079cc 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,28 @@ +Wed Jul 27 19:17:38 UTC 2022 +l/tevent-0.13.0-x86_64-1.txz: Upgraded. +n/samba-4.16.4-x86_64-1.txz: Upgraded. + This update fixes the following security issues: + Samba AD users can bypass certain restrictions associated with changing + passwords. + Samba AD users can forge password change requests for any user. + Samba AD users can crash the server process with an LDAP add or modify + request. + Samba AD users can induce a use-after-free in the server process with an + LDAP add or modify request. + Server memory information leak via SMB1. + For more information, see: + https://www.samba.org/samba/security/CVE-2022-2031.html + https://www.samba.org/samba/security/CVE-2022-32744.html + https://www.samba.org/samba/security/CVE-2022-32745.html + https://www.samba.org/samba/security/CVE-2022-32746.html + https://www.samba.org/samba/security/CVE-2022-32742.html + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2031 + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32744 + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32745 + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32746 + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32742 + (* Security fix *) ++--------------------------+ Tue Jul 26 19:27:53 UTC 2022 a/etc-15.1-x86_64-1.txz: Upgraded. Fixed install script to avoid a warning from chown that "." should be ":". diff --git a/FILELIST.TXT b/FILELIST.TXT index fcbf2e49b..046fb2ffd 100644 --- a/FILELIST.TXT +++ b/FILELIST.TXT @@ -1,20 +1,20 @@ -Tue Jul 26 19:31:28 UTC 2022 +Wed Jul 27 19:21:47 UTC 2022 Here is the file list for this directory. If you are using a mirror site and find missing or extra files in the disk subdirectories, please have the archive administrator refresh the mirror. -drwxr-xr-x 12 root root 4096 2022-07-26 19:27 . +drwxr-xr-x 12 root root 4096 2022-07-27 19:17 . -rw-r--r-- 1 root root 5767 2022-02-02 22:44 ./ANNOUNCE.15.0 -rw-r--r-- 1 root root 16617 2022-02-02 23:27 ./CHANGES_AND_HINTS.TXT --rw-r--r-- 1 root root 1104607 2022-07-25 20:59 ./CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2022-07-25 20:59 ./CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 1104467 2022-07-26 19:31 ./CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2022-07-26 19:31 ./CHECKSUMS.md5.asc -rw-r--r-- 1 root root 17976 1994-06-10 02:28 ./COPYING -rw-r--r-- 1 root root 35147 2007-06-30 04:21 ./COPYING3 -rw-r--r-- 1 root root 19573 2016-06-23 20:08 ./COPYRIGHT.TXT -rw-r--r-- 1 root root 616 2006-10-02 04:37 ./CRYPTO_NOTICE.TXT --rw-r--r-- 1 root root 224836 2022-07-26 19:27 ./ChangeLog.txt +-rw-r--r-- 1 root root 226094 2022-07-27 19:17 ./ChangeLog.txt drwxr-xr-x 3 root root 4096 2013-03-20 22:17 ./EFI drwxr-xr-x 2 root root 4096 2022-07-24 22:00 ./EFI/BOOT -rw-r--r-- 1 root root 1187840 2021-06-15 19:16 ./EFI/BOOT/bootx64.efi @@ -25,9 +25,9 @@ drwxr-xr-x 2 root root 4096 2022-07-24 22:00 ./EFI/BOOT -rwxr-xr-x 1 root root 2504 2019-07-05 18:54 ./EFI/BOOT/make-grub.sh -rw-r--r-- 1 root root 10722 2013-09-21 19:02 ./EFI/BOOT/osdetect.cfg -rw-r--r-- 1 root root 1273 2013-08-12 21:08 ./EFI/BOOT/tools.cfg --rw-r--r-- 1 root root 1437876 2022-07-25 20:59 ./FILELIST.TXT +-rw-r--r-- 1 root root 1437704 2022-07-26 19:31 ./FILELIST.TXT -rw-r--r-- 1 root root 1572 2012-08-29 18:27 ./GPG-KEY --rw-r--r-- 1 root root 873130 2022-07-26 19:31 ./PACKAGES.TXT +-rw-r--r-- 1 root root 873130 2022-07-27 19:21 ./PACKAGES.TXT -rw-r--r-- 1 root root 8034 2022-02-02 03:36 ./README.TXT -rw-r--r-- 1 root root 3635 2022-07-24 21:49 ./README.initrd -rw-r--r-- 1 root root 34162 2022-01-30 20:35 ./README_CRYPT.TXT @@ -744,11 +744,11 @@ drwxr-xr-x 2 root root 4096 2022-02-03 07:02 ./patches -rw-r--r-- 1 root root 575 2022-02-03 07:02 ./patches/FILE_LIST -rw-r--r-- 1 root root 14 2022-02-03 07:02 ./patches/MANIFEST.bz2 -rw-r--r-- 1 root root 224 2022-02-03 07:02 ./patches/PACKAGES.TXT -drwxr-xr-x 17 root root 4096 2022-07-26 19:31 ./slackware64 --rw-r--r-- 1 root root 340286 2022-07-26 19:31 ./slackware64/CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2022-07-26 19:31 ./slackware64/CHECKSUMS.md5.asc --rw-r--r-- 1 root root 421934 2022-07-26 19:30 ./slackware64/FILE_LIST --rw-r--r-- 1 root root 4234592 2022-07-26 19:30 ./slackware64/MANIFEST.bz2 +drwxr-xr-x 17 root root 4096 2022-07-27 19:21 ./slackware64 +-rw-r--r-- 1 root root 340286 2022-07-27 19:21 ./slackware64/CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2022-07-27 19:21 ./slackware64/CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 421934 2022-07-27 19:20 ./slackware64/FILE_LIST +-rw-r--r-- 1 root root 4236577 2022-07-27 19:20 ./slackware64/MANIFEST.bz2 lrwxrwxrwx 1 root root 15 2009-08-23 23:34 ./slackware64/PACKAGES.TXT -> ../PACKAGES.TXT drwxr-xr-x 2 root root 32768 2022-07-26 19:30 ./slackware64/a -rw-r--r-- 1 root root 327 2022-02-15 18:16 ./slackware64/a/aaa_base-15.1-x86_64-2.txt @@ -2745,7 +2745,7 @@ drwxr-xr-x 2 root root 86016 2022-07-20 19:03 ./slackware64/kde -rw-r--r-- 1 root root 296 2022-07-07 20:02 ./slackware64/kde/zeroconf-ioslave-22.04.3-x86_64-1.txt -rw-r--r-- 1 root root 50776 2022-07-07 20:02 ./slackware64/kde/zeroconf-ioslave-22.04.3-x86_64-1.txz -rw-r--r-- 1 root root 163 2022-07-07 20:02 ./slackware64/kde/zeroconf-ioslave-22.04.3-x86_64-1.txz.asc -drwxr-xr-x 2 root root 86016 2022-07-26 19:30 ./slackware64/l +drwxr-xr-x 2 root root 86016 2022-07-27 19:20 ./slackware64/l -rw-r--r-- 1 root root 329 2022-03-06 20:00 ./slackware64/l/GConf-3.2.6-x86_64-8.txt -rw-r--r-- 1 root root 928144 2022-03-06 20:00 ./slackware64/l/GConf-3.2.6-x86_64-8.txz -rw-r--r-- 1 root root 163 2022-03-06 20:00 ./slackware64/l/GConf-3.2.6-x86_64-8.txz.asc @@ -3882,9 +3882,9 @@ drwxr-xr-x 2 root root 86016 2022-07-26 19:30 ./slackware64/l -rw-r--r-- 1 root root 305 2022-06-15 17:54 ./slackware64/l/tdb-1.4.7-x86_64-1.txt -rw-r--r-- 1 root root 73276 2022-06-15 17:54 ./slackware64/l/tdb-1.4.7-x86_64-1.txz -rw-r--r-- 1 root root 163 2022-06-15 17:54 ./slackware64/l/tdb-1.4.7-x86_64-1.txz.asc --rw-r--r-- 1 root root 269 2022-06-15 17:55 ./slackware64/l/tevent-0.12.1-x86_64-1.txt --rw-r--r-- 1 root root 116084 2022-06-15 17:55 ./slackware64/l/tevent-0.12.1-x86_64-1.txz --rw-r--r-- 1 root root 163 2022-06-15 17:55 ./slackware64/l/tevent-0.12.1-x86_64-1.txz.asc +-rw-r--r-- 1 root root 269 2022-07-27 18:57 ./slackware64/l/tevent-0.13.0-x86_64-1.txt +-rw-r--r-- 1 root root 116368 2022-07-27 18:57 ./slackware64/l/tevent-0.13.0-x86_64-1.txz +-rw-r--r-- 1 root root 163 2022-07-27 18:57 ./slackware64/l/tevent-0.13.0-x86_64-1.txz.asc -rw-r--r-- 1 root root 408 2021-09-01 18:04 ./slackware64/l/tidy-html5-5.8.0-x86_64-2.txt -rw-r--r-- 1 root root 296976 2021-09-01 18:04 ./slackware64/l/tidy-html5-5.8.0-x86_64-2.txz -rw-r--r-- 1 root root 163 2021-09-01 18:04 ./slackware64/l/tidy-html5-5.8.0-x86_64-2.txz.asc @@ -3918,7 +3918,7 @@ drwxr-xr-x 2 root root 86016 2022-07-26 19:30 ./slackware64/l -rw-r--r-- 1 root root 463 2022-01-21 04:11 ./slackware64/l/zstd-1.5.2-x86_64-1.txt -rw-r--r-- 1 root root 437228 2022-01-21 04:11 ./slackware64/l/zstd-1.5.2-x86_64-1.txz -rw-r--r-- 1 root root 163 2022-01-21 04:11 ./slackware64/l/zstd-1.5.2-x86_64-1.txz.asc -drwxr-xr-x 2 root root 36864 2022-07-26 19:30 ./slackware64/n +drwxr-xr-x 2 root root 36864 2022-07-27 19:20 ./slackware64/n -rw-r--r-- 1 root root 357 2022-06-28 18:16 ./slackware64/n/ModemManager-1.18.10-x86_64-1.txt -rw-r--r-- 1 root root 2145540 2022-06-28 18:16 ./slackware64/n/ModemManager-1.18.10-x86_64-1.txz -rw-r--r-- 1 root root 163 2022-06-28 18:16 ./slackware64/n/ModemManager-1.18.10-x86_64-1.txz.asc @@ -4310,9 +4310,9 @@ drwxr-xr-x 2 root root 36864 2022-07-26 19:30 ./slackware64/n -rw-r--r-- 1 root root 443 2022-03-28 18:40 ./slackware64/n/s-nail-14.9.24-x86_64-1.txt -rw-r--r-- 1 root root 540560 2022-03-28 18:40 ./slackware64/n/s-nail-14.9.24-x86_64-1.txz -rw-r--r-- 1 root root 163 2022-03-28 18:40 ./slackware64/n/s-nail-14.9.24-x86_64-1.txz.asc --rw-r--r-- 1 root root 507 2022-07-19 19:25 ./slackware64/n/samba-4.16.3-x86_64-1.txt --rw-r--r-- 1 root root 13237740 2022-07-19 19:25 ./slackware64/n/samba-4.16.3-x86_64-1.txz --rw-r--r-- 1 root root 163 2022-07-19 19:25 ./slackware64/n/samba-4.16.3-x86_64-1.txz.asc +-rw-r--r-- 1 root root 507 2022-07-27 18:47 ./slackware64/n/samba-4.16.4-x86_64-1.txt +-rw-r--r-- 1 root root 13205244 2022-07-27 18:47 ./slackware64/n/samba-4.16.4-x86_64-1.txz +-rw-r--r-- 1 root root 163 2022-07-27 18:47 ./slackware64/n/samba-4.16.4-x86_64-1.txz.asc -rw-r--r-- 1 root root 346 2021-02-13 12:30 ./slackware64/n/slrn-1.0.3a-x86_64-3.txt -rw-r--r-- 1 root root 468372 2021-02-13 12:30 ./slackware64/n/slrn-1.0.3a-x86_64-3.txz -rw-r--r-- 1 root root 163 2021-02-13 12:30 ./slackware64/n/slrn-1.0.3a-x86_64-3.txz.asc @@ -5649,11 +5649,11 @@ drwxr-xr-x 2 root root 4096 2021-02-15 19:33 ./slackware64/y -rw-r--r-- 1 root root 1486956 2021-02-13 13:56 ./slackware64/y/nethack-3.6.6-x86_64-3.txz -rw-r--r-- 1 root root 163 2021-02-13 13:56 ./slackware64/y/nethack-3.6.6-x86_64-3.txz.asc -rw-r--r-- 1 root root 26 2020-12-30 21:55 ./slackware64/y/tagfile -drwxr-xr-x 18 root root 4096 2022-07-26 19:31 ./source --rw-r--r-- 1 root root 588877 2022-07-26 19:31 ./source/CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2022-07-26 19:31 ./source/CHECKSUMS.md5.asc --rw-r--r-- 1 root root 819585 2022-07-26 19:31 ./source/FILE_LIST --rw-r--r-- 1 root root 23556230 2022-07-26 19:31 ./source/MANIFEST.bz2 +drwxr-xr-x 18 root root 4096 2022-07-27 19:21 ./source +-rw-r--r-- 1 root root 588877 2022-07-27 19:21 ./source/CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2022-07-27 19:21 ./source/CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 819585 2022-07-27 19:21 ./source/FILE_LIST +-rw-r--r-- 1 root root 23558833 2022-07-27 19:21 ./source/MANIFEST.bz2 -rw-r--r-- 1 root root 828 2022-02-02 04:43 ./source/README.TXT drwxr-xr-x 122 root root 4096 2022-04-30 19:56 ./source/a -rw-r--r-- 1 root root 111 2022-02-07 20:58 ./source/a/FTBFSlog @@ -11835,10 +11835,10 @@ drwxr-xr-x 2 root root 4096 2022-06-15 17:54 ./source/l/tdb -rw-r--r-- 1 root root 488 2022-06-09 04:25 ./source/l/tdb/tdb-1.4.7.tar.asc -rw-r--r-- 1 root root 741714 2022-06-09 04:25 ./source/l/tdb/tdb-1.4.7.tar.gz -rwxr-xr-x 1 root root 4514 2022-01-25 05:56 ./source/l/tdb/tdb.SlackBuild -drwxr-xr-x 2 root root 4096 2022-06-15 17:55 ./source/l/tevent +drwxr-xr-x 2 root root 4096 2022-07-27 18:56 ./source/l/tevent -rw-r--r-- 1 root root 723 2018-02-27 06:12 ./source/l/tevent/slack-desc --rw-r--r-- 1 root root 488 2022-06-09 04:26 ./source/l/tevent/tevent-0.12.1.tar.asc --rw-r--r-- 1 root root 637186 2022-06-09 04:26 ./source/l/tevent/tevent-0.12.1.tar.lz +-rw-r--r-- 1 root root 488 2022-07-26 15:04 ./source/l/tevent/tevent-0.13.0.tar.asc +-rw-r--r-- 1 root root 637891 2022-07-26 15:04 ./source/l/tevent/tevent-0.13.0.tar.lz -rwxr-xr-x 1 root root 4541 2022-04-14 19:53 ./source/l/tevent/tevent.SlackBuild drwxr-xr-x 2 root root 4096 2021-08-08 18:53 ./source/l/tidy-html5 -rw-r--r-- 1 root root 898 2020-05-12 18:36 ./source/l/tidy-html5/slack-desc @@ -12849,14 +12849,14 @@ drwxr-xr-x 2 root root 4096 2022-03-28 18:40 ./source/n/s-nail -rw-r--r-- 1 root root 267 2021-02-20 02:10 ./source/n/s-nail/s-nail.no.emptystart.diff.gz -rw-r--r-- 1 root root 92 2022-03-28 18:40 ./source/n/s-nail/s-nail.url -rw-r--r-- 1 root root 930 2018-11-24 18:35 ./source/n/s-nail/slack-desc -drwxr-xr-x 2 root root 4096 2022-07-19 19:21 ./source/n/samba +drwxr-xr-x 2 root root 4096 2022-07-27 18:43 ./source/n/samba -rw-r--r-- 1 root root 703 2016-06-13 04:19 ./source/n/samba/doinst.sh.gz -rw-r--r-- 1 root root 940 2016-06-04 17:50 ./source/n/samba/rc.samba --rw-r--r-- 1 root root 833 2022-07-18 11:15 ./source/n/samba/samba-4.16.3.tar.asc --rw-r--r-- 1 root root 19075548 2022-07-18 11:15 ./source/n/samba/samba-4.16.3.tar.lz +-rw-r--r-- 1 root root 833 2022-07-27 07:21 ./source/n/samba/samba-4.16.4.tar.asc +-rw-r--r-- 1 root root 19077955 2022-07-27 07:21 ./source/n/samba/samba-4.16.4.tar.lz -rwxr-xr-x 1 root root 7644 2022-05-02 18:05 ./source/n/samba/samba.SlackBuild -rw-r--r-- 1 root root 227 2019-02-06 20:36 ./source/n/samba/samba.libsmbclient.h.ffmpeg.compat.diff.gz --rw-r--r-- 1 root root 129 2022-07-19 17:02 ./source/n/samba/samba.url +-rw-r--r-- 1 root root 129 2022-07-27 18:42 ./source/n/samba/samba.url -rw-r--r-- 1 root root 960 2018-02-27 06:13 ./source/n/samba/slack-desc -rw-r--r-- 1 root root 7921 2018-04-29 17:31 ./source/n/samba/smb.conf.default -rw-r--r-- 1 root root 7933 2018-01-14 20:41 ./source/n/samba/smb.conf.default.orig diff --git a/source/n/samba/samba.url b/source/n/samba/samba.url index d953cbfc2..7e59bab02 100644 --- a/source/n/samba/samba.url +++ b/source/n/samba/samba.url @@ -1,2 +1,2 @@ -https://download.samba.org/pub/samba/stable/samba-4.16.3.tar.gz -https://download.samba.org/pub/samba/stable/samba-4.16.3.tar.asc +https://download.samba.org/pub/samba/stable/samba-4.16.4.tar.gz +https://download.samba.org/pub/samba/stable/samba-4.16.4.tar.asc |