summaryrefslogtreecommitdiff
path: root/net/samba4/patches
diff options
context:
space:
mode:
authortaca <taca@pkgsrc.org>2021-04-29 15:21:16 +0000
committertaca <taca@pkgsrc.org>2021-04-29 15:21:16 +0000
commitd878b967ef9f36188b0a7e9e1bc255ab3eb7c541 (patch)
tree9831bad2898ad64e3ea60cb1a9a07bd45705f350 /net/samba4/patches
parent04bff3bfb8f450d097c087ea9c948a1e515c0d87 (diff)
downloadpkgsrc-d878b967ef9f36188b0a7e9e1bc255ab3eb7c541.tar.gz
net/samba4: update to 4.14.4
pkgsrc changes: remove extra spaces in some patch files. ============================== Release Notes for Samba 4.14.4 April 29, 2021 ============================== This is a security release in order to address the following defect: o CVE-2021-20254: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token. ======= Details ======= o CVE-2021-20254: The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. Most commonly this flaw caused the calling code to crash, but an alert user (Peter Eriksson, IT Department, Linköping University) found this flaw by noticing an unprivileged user was able to delete a file within a network share that they should have been disallowed access to. Analysis of the code paths has not allowed us to discover a way for a remote user to be able to trigger this flaw reproducibly or on demand, but this CVE has been issued out of an abundance of caution. Changes since 4.14.3 -------------------- o Volker Lendecke <vl@samba.org> * BUG 14571: CVE-2021-20254: Fix buffer overrun in sids_to_unixids().
Diffstat (limited to 'net/samba4/patches')
-rw-r--r--net/samba4/patches/patch-lib_pthreadpool_pthreadpool.c4
-rw-r--r--net/samba4/patches/patch-lib_tdb_common_mutex.c4
-rw-r--r--net/samba4/patches/patch-lib_tevent_tevent.c4
-rw-r--r--net/samba4/patches/patch-lib_tevent_tevent__threads.c4
-rw-r--r--net/samba4/patches/patch-lib_util_smb__threads.h4
-rw-r--r--net/samba4/patches/patch-lib_util_tfork.c4
-rw-r--r--net/samba4/patches/patch-nsswitch_stress-nss-libwbclient.c4
-rw-r--r--net/samba4/patches/patch-source3_libsmb_pylibsmb.c4
-rw-r--r--net/samba4/patches/patch-source3_smbd_process.c4
-rw-r--r--net/samba4/patches/patch-source4_heimdal_include_heim__threads.h4
10 files changed, 20 insertions, 20 deletions
diff --git a/net/samba4/patches/patch-lib_pthreadpool_pthreadpool.c b/net/samba4/patches/patch-lib_pthreadpool_pthreadpool.c
index a2a4d39f72d..e8061c3914b 100644
--- a/net/samba4/patches/patch-lib_pthreadpool_pthreadpool.c
+++ b/net/samba4/patches/patch-lib_pthreadpool_pthreadpool.c
@@ -1,8 +1,8 @@
-$NetBSD: patch-lib_pthreadpool_pthreadpool.c,v 1.1 2019/09/05 12:39:56 hauke Exp $
+$NetBSD: patch-lib_pthreadpool_pthreadpool.c,v 1.2 2021/04/29 15:21:16 taca Exp $
On SunOS (OpenSolaris), pthread_mutex_init() expects a zeroed-out
mutex data structure
-
+
--- lib/pthreadpool/pthreadpool.c.orig 2019-01-15 10:07:00.000000000 +0000
+++ lib/pthreadpool/pthreadpool.c
@@ -153,6 +153,7 @@ int pthreadpool_init(unsigned max_thread
diff --git a/net/samba4/patches/patch-lib_tdb_common_mutex.c b/net/samba4/patches/patch-lib_tdb_common_mutex.c
index a35839189a9..6e4032ea610 100644
--- a/net/samba4/patches/patch-lib_tdb_common_mutex.c
+++ b/net/samba4/patches/patch-lib_tdb_common_mutex.c
@@ -1,8 +1,8 @@
-$NetBSD: patch-lib_tdb_common_mutex.c,v 1.1 2019/09/05 12:39:56 hauke Exp $
+$NetBSD: patch-lib_tdb_common_mutex.c,v 1.2 2021/04/29 15:21:16 taca Exp $
On SunOS (OpenSolaris), pthread_mutex_init() expects a zeroed-out
mutex data structure
-
+
--- lib/tdb/common/mutex.c.orig 2019-01-15 10:07:00.000000000 +0000
+++ lib/tdb/common/mutex.c
@@ -567,6 +567,7 @@ int tdb_mutex_init(struct tdb_context *t
diff --git a/net/samba4/patches/patch-lib_tevent_tevent.c b/net/samba4/patches/patch-lib_tevent_tevent.c
index 1fd13526a33..f23048c817f 100644
--- a/net/samba4/patches/patch-lib_tevent_tevent.c
+++ b/net/samba4/patches/patch-lib_tevent_tevent.c
@@ -1,8 +1,8 @@
-$NetBSD: patch-lib_tevent_tevent.c,v 1.1 2019/09/05 12:39:56 hauke Exp $
+$NetBSD: patch-lib_tevent_tevent.c,v 1.2 2021/04/29 15:21:16 taca Exp $
On SunOS (OpenSolaris), pthread_mutex_init() expects a zeroed-out
mutex data structure
-
+
--- lib/tevent/tevent.c.orig 2019-01-15 10:07:00.000000000 +0000
+++ lib/tevent/tevent.c
@@ -423,6 +423,7 @@ static int tevent_common_context_constru
diff --git a/net/samba4/patches/patch-lib_tevent_tevent__threads.c b/net/samba4/patches/patch-lib_tevent_tevent__threads.c
index 8fb52b71780..6af3376b427 100644
--- a/net/samba4/patches/patch-lib_tevent_tevent__threads.c
+++ b/net/samba4/patches/patch-lib_tevent_tevent__threads.c
@@ -1,8 +1,8 @@
-$NetBSD: patch-lib_tevent_tevent__threads.c,v 1.1 2019/09/05 12:39:56 hauke Exp $
+$NetBSD: patch-lib_tevent_tevent__threads.c,v 1.2 2021/04/29 15:21:16 taca Exp $
On SunOS (OpenSolaris), pthread_mutex_init() expects a zeroed-out
mutex data structure
-
+
--- lib/tevent/tevent_threads.c.orig 2019-01-15 10:07:00.000000000 +0000
+++ lib/tevent/tevent_threads.c
@@ -234,6 +234,7 @@ struct tevent_thread_proxy *tevent_threa
diff --git a/net/samba4/patches/patch-lib_util_smb__threads.h b/net/samba4/patches/patch-lib_util_smb__threads.h
index 8df40c6ded7..b3dfe194a82 100644
--- a/net/samba4/patches/patch-lib_util_smb__threads.h
+++ b/net/samba4/patches/patch-lib_util_smb__threads.h
@@ -1,8 +1,8 @@
-$NetBSD: patch-lib_util_smb__threads.h,v 1.1 2019/09/05 12:39:56 hauke Exp $
+$NetBSD: patch-lib_util_smb__threads.h,v 1.2 2021/04/29 15:21:16 taca Exp $
On SunOS (OpenSolaris), pthread_mutex_init() expects a zeroed-out
mutex data structure
-
+
--- lib/util/smb_threads.h.orig 2019-01-15 10:07:00.000000000 +0000
+++ lib/util/smb_threads.h
@@ -66,6 +66,7 @@ static int smb_create_mutex_pthread(cons
diff --git a/net/samba4/patches/patch-lib_util_tfork.c b/net/samba4/patches/patch-lib_util_tfork.c
index 369c5cb59d8..397648612af 100644
--- a/net/samba4/patches/patch-lib_util_tfork.c
+++ b/net/samba4/patches/patch-lib_util_tfork.c
@@ -1,8 +1,8 @@
-$NetBSD: patch-lib_util_tfork.c,v 1.1 2019/09/05 12:39:56 hauke Exp $
+$NetBSD: patch-lib_util_tfork.c,v 1.2 2021/04/29 15:21:16 taca Exp $
On SunOS (OpenSolaris), pthread_mutex_init() expects a zeroed-out
mutex data structure
-
+
--- lib/util/tfork.c.orig 2019-01-15 10:07:00.000000000 +0000
+++ lib/util/tfork.c
@@ -281,6 +281,7 @@ static void tfork_global_initialize(void
diff --git a/net/samba4/patches/patch-nsswitch_stress-nss-libwbclient.c b/net/samba4/patches/patch-nsswitch_stress-nss-libwbclient.c
index 532dabeb917..827d7609a2a 100644
--- a/net/samba4/patches/patch-nsswitch_stress-nss-libwbclient.c
+++ b/net/samba4/patches/patch-nsswitch_stress-nss-libwbclient.c
@@ -1,8 +1,8 @@
-$NetBSD: patch-nsswitch_stress-nss-libwbclient.c,v 1.1 2019/09/05 12:39:56 hauke Exp $
+$NetBSD: patch-nsswitch_stress-nss-libwbclient.c,v 1.2 2021/04/29 15:21:16 taca Exp $
On SunOS (OpenSolaris), pthread_mutex_init() expects a zeroed-out
mutex data structure
-
+
--- nsswitch/stress-nss-libwbclient.c.orig 2019-01-15 10:07:00.000000000 +0000
+++ nsswitch/stress-nss-libwbclient.c
@@ -118,6 +118,7 @@ int main(int argc, char *argv[])
diff --git a/net/samba4/patches/patch-source3_libsmb_pylibsmb.c b/net/samba4/patches/patch-source3_libsmb_pylibsmb.c
index 1dee0c94472..8cb8d761ac9 100644
--- a/net/samba4/patches/patch-source3_libsmb_pylibsmb.c
+++ b/net/samba4/patches/patch-source3_libsmb_pylibsmb.c
@@ -1,8 +1,8 @@
-$NetBSD: patch-source3_libsmb_pylibsmb.c,v 1.1 2019/09/05 12:39:56 hauke Exp $
+$NetBSD: patch-source3_libsmb_pylibsmb.c,v 1.2 2021/04/29 15:21:16 taca Exp $
On SunOS (OpenSolaris), pthread_mutex_init() expects a zeroed-out
mutex data structure
-
+
--- source3/libsmb/pylibsmb.c.orig 2019-05-07 08:38:21.000000000 +0000
+++ source3/libsmb/pylibsmb.c
@@ -285,6 +285,7 @@ static int py_tevent_cond_wait(struct py
diff --git a/net/samba4/patches/patch-source3_smbd_process.c b/net/samba4/patches/patch-source3_smbd_process.c
index 31ec4753141..99950d4f9c1 100644
--- a/net/samba4/patches/patch-source3_smbd_process.c
+++ b/net/samba4/patches/patch-source3_smbd_process.c
@@ -1,8 +1,8 @@
-$NetBSD: patch-source3_smbd_process.c,v 1.1 2019/09/05 12:39:56 hauke Exp $
+$NetBSD: patch-source3_smbd_process.c,v 1.2 2021/04/29 15:21:16 taca Exp $
On SunOS (OpenSolaris), pthread_mutex_init() expects a zeroed-out
mutex data structure
-
+
--- source3/smbd/process.c.orig 2019-01-15 10:07:00.000000000 +0000
+++ source3/smbd/process.c
@@ -3342,6 +3342,7 @@ bool fork_echo_handler(struct smbXsrv_co
diff --git a/net/samba4/patches/patch-source4_heimdal_include_heim__threads.h b/net/samba4/patches/patch-source4_heimdal_include_heim__threads.h
index f4a2f1b940c..6a3d7a31383 100644
--- a/net/samba4/patches/patch-source4_heimdal_include_heim__threads.h
+++ b/net/samba4/patches/patch-source4_heimdal_include_heim__threads.h
@@ -1,8 +1,8 @@
-$NetBSD: patch-source4_heimdal_include_heim__threads.h,v 1.1 2019/09/05 12:39:56 hauke Exp $
+$NetBSD: patch-source4_heimdal_include_heim__threads.h,v 1.2 2021/04/29 15:21:16 taca Exp $
On SunOS (OpenSolaris), pthread_mutex_init() expects a zeroed-out
mutex data structure
-
+
--- source4/heimdal/include/heim_threads.h.orig 2019-01-15 10:07:00.000000000 +0000
+++ source4/heimdal/include/heim_threads.h
@@ -87,7 +87,7 @@