Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
|
|
|
|
|
|
2.2.3:
Unknown changes
|
|
All checksums have been double-checked against existing RMD160 and
SHA512 hashes
The following distfiles could not be fetched (some may be only fetched
conditionally):
./databases/cstore/distinfo D6.data.ros.gz
./databases/cstore/distinfo cstore0.2.tar.gz
./databases/cstore/distinfo data4.tar.gz
|
|
|
|
|
|
|
|
2.3.0:
Unknown changes
|
|
==============================
Release Notes for Samba 4.13.7
March 24, 2021
==============================
This is a follow-up release to depend on the correct ldb version. This is only
needed when building against a system ldb library.
This is a security release in order to address the following defects:
o CVE-2020-27840: Heap corruption via crafted DN strings.
o CVE-2021-20277: Out of bounds read in AD DC LDAP server.
=======
Details
=======
o CVE-2020-27840:
An anonymous attacker can crash the Samba AD DC LDAP server by sending easily
crafted DNs as part of a bind request. More serious heap corruption is likely
also possible.
o CVE-2021-20277:
User-controlled LDAP filter strings against the AD DC LDAP server may crash
the LDAP server.
For more details, please refer to the security advisories.
Changes since 4.13.6
--------------------
o Release with dependency on ldb version 2.2.1.
|
|
For the Python 3.8 default switch.
|
|
2.2.0:
Unknown changes
|
|
2.1.4:
Unknown changes
|
|
Changes 4.12.3:
* BUG 14301: Fix smbd panic on force-close share during async io.
* BUG 14343: s3: vfs_full_audit: Add missing fcntl entry in vfs_op_names[]
array.
* BUG 14361: vfs_io_uring: Fix data corruption with Windows clients.
* BUG 14372: Fix smbd crashes when MacOS Catalina connects if iconv
initialization fails.
* BUG 14150: Exporting from macOS Adobe Illustrator creates multiple copies.
* BUG 14256: smbd does a chdir() twice per request.
* BUG 14320: smbd mistakenly updates a file's write-time on close.
* BUG 14350: vfs_shadow_copy2: implement case canonicalisation in
shadow_copy2_get_real_filename().
* BUG 14375: Fix Windows 7 clients problem after upgrading samba file server.
* BUG 14359: s3: Pass DCE RPC handle type to create_policy_hnd.
* BUG 14155: Fix uxsuccess test with new MIT krb5 library 1.18.
* BUG 14342: mit-kdc: Explicitly reject S4U requests.
* BUG 14352: dbwrap_watch: Set rec->value_valid while returning nested
share_mode_do_locked().
* BUG 14345: lib:util: Fix smbclient -l basename dir.
* BUG 14336: s3:libads: Fix ads_get_upn().
* BUG 14348: ctdb: Fix a memleak.
* BUG 14366: Malicous SMB1 server can crash libsmbclient.
* BUG 14330: ldb: Bump version to 2.1.3, LMDB databases can grow without
bounds
* BUG 14361: vfs_io_uring: Fix data corruption with Windows clients.
* BUG 14344: s3/librpc/crypto: Fix double free with unresolved credential
cache.
* BUG 14358: docs-xml: Fix usernames in pam_winbind manpages.
|
|
|
|
installed, anyway, resulting in a PLIST error.
ldb's snazzy little build system has no official configuration option
for this, so we reach in and flick the switch by hand.
|
|
2.1.2:
Unknown changes
|
|
2.1.1:
Unknown changes (needed for Samba 4.12.0).
|
|
|
|
pkglint -r --network --only "migrate"
As a side-effect of migrating the homepages, pkglint also fixed a few
indentations in unrelated lines. These and the new homepages have been
checked manually.
|
|
|
|
2.0.8:
Unknown changes
|
|
|
|
2.0.7:
Unknown changes
|
|
1.5.5:
Unknown changes
|
|
|
|
This is a semi-manual PKGREVISION bump.
|
|
From Michael Moll via Pull Request.
Fixes NetBSD/pkgsrc#45.
|
|
|
|
|
|
ldb is a LDAP-like embedded database. It is not at all LDAP standards
compliant, so if you want a standards compliant database then please see the
excellent OpenLDAP project.
What ldb does is provide a fast database with an LDAP-like API designed to be
used within an application. In some ways it can be seen as a intermediate
solution between key-value pair databases and a real LDAP database.
ldb is the database engine used in Samba4.
Features:
* The main features that separate ldb from other solutions are:
* Safe multi-reader, multi-writer, using byte range locking
* LDAP-like API
* fast operation
* choice of local tdb or remote LDAP backends
* integration with talloc
* schema-less operation, for trivial setup
* modules for extensions (such as schema support)
* easy setup of indexes and attribute properties
* LDIF for import/export
* ldbedit tool for database (via LDIF) editing (reminiscent of 'vipw')
|