Skip to contentSkip to conversation

iptables: bump to version 1.4.12

PATCH New Gustavo Zacarias 4 participants 9 messages Jul 28, 2011 – Aug 4, 2011

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/3 iptables: bump to version 1.4.12

Bump iptables to version 1.4.12 for linux kernel 3.0 support

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/iptables/iptables.mk |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
package/iptables/iptables.mk +1 -1
index c464e6b..1ee8828 100644
@@ -4,7 +4,7 @@
 #
 #############################################################
 
-IPTABLES_VERSION = 1.4.11.1
+IPTABLES_VERSION = 1.4.12
 IPTABLES_SOURCE = iptables-$(IPTABLES_VERSION).tar.bz2
 IPTABLES_SITE = http://ftp.netfilter.org/pub/iptables
 IPTABLES_INSTALL_STAGING = YES
Signature · 1 line
1.7.3.4
author
#1 lore raw

PATCH 2/3 iw: bump to version 3.0

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/iw/iw.mk |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
package/iw/iw.mk +1 -1
index 0f5dd0e..be3edc2 100644
@@ -4,7 +4,7 @@
 #
 #############################################################
 
-IW_VERSION = 0.9.22
+IW_VERSION = 3.0
 IW_SOURCE = iw-$(IW_VERSION).tar.bz2
 IW_SITE = http://wireless.kernel.org/download/iw
 IW_DEPENDENCIES = host-pkg-config libnl
Signature · 1 line
1.7.3.4
#2 lore raw

PATCH 2/3 iw: bump to version 3.0

Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Gustavo" == Gustavo Zacarias <[email protected]> writes:

Gustavo> Signed-off-by: Gustavo Zacarias <[email protected]>

Committed, thanks.

Signature · 1 line
Bye, Peter Korsgaard
author
#3 lore raw

PATCH 3/3 samba: bump to version 3.3.15

In reply to Gustavo Zacarias

Bump samba to version 3.3.15 and add security patches for CVE-2011-2522 and CVE-2011-2694.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/samba/samba-00CVE-2011-2694.patch |   55 +++
 package/samba/samba-01CVE-2011-2522.patch |  749 +++++++++++++++++++++++++++++
 package/samba/samba-CVE-2011-0719.patch   |  613 -----------------------
 package/samba/samba.mk                    |    7 +-
 4 files changed, 808 insertions(+), 616 deletions(-)
 create mode 100644 package/samba/samba-00CVE-2011-2694.patch
 create mode 100644 package/samba/samba-01CVE-2011-2522.patch
 delete mode 100644 package/samba/samba-CVE-2011-0719.patch
package/samba/samba-00CVE-2011-2694.patch new file +55 -0
new file mode 100644
index 0000000..167accf
@@ -0,0 +1,55 @@
+From d401ccaedaec09ad6900ec24ecaf205bed3e3ac1 Mon Sep 17 00:00:00 2001
+From: Kai Blin <[email protected]>
+Date: Thu, 7 Jul 2011 10:03:33 +0200
+Subject: [PATCH] s3 swat: Fix possible XSS attack (bug #8289)
+
+Nobuhiro Tsuji of NTT DATA SECURITY CORPORATION reported a possible XSS attack
+against SWAT, the Samba Web Administration Tool. The attack uses reflection to
+insert arbitrary content into the "change password" page.
+
+This patch fixes the reflection issue by not printing user-specified content on
+the website anymore.
+
+Signed-off-by: Kai Blin <[email protected]>
+
+CVE-2011-2694.
+---
+ source/web/swat.c |   14 ++------------
+ 1 files changed, 2 insertions(+), 12 deletions(-)
+
+diff --git a/source/web/swat.c b/source/web/swat.c
+index 9c7294a..434b1ac 100644
+--- a/source/web/swat.c
++++ b/source/web/swat.c
+@@ -1120,11 +1120,9 @@ static void chg_passwd(void)
+ 	if(cgi_variable(CHG_S_PASSWD_FLAG)) {
+ 		printf("<p>");
+ 		if (rslt == True) {
+-			printf(_(" The passwd for '%s' has been changed."), cgi_variable_nonull(SWAT_USER));
+-			printf("\n");
++			printf("%s\n", _(" The passwd has been changed."));
+ 		} else {
+-			printf(_(" The passwd for '%s' has NOT been changed."), cgi_variable_nonull(SWAT_USER));
+-			printf("\n");
++			printf("%s\n", _(" The passwd has NOT been changed."));
+ 		}
+ 	}
+ 	
+@@ -1138,14 +1136,6 @@ static void passwd_page(void)
+ {
+ 	const char *new_name = cgi_user_name();
+ 
+-	/* 
+-	 * After the first time through here be nice. If the user
+-	 * changed the User box text to another users name, remember it.
+-	 */
+-	if (cgi_variable(SWAT_USER)) {
+-		new_name = cgi_variable_nonull(SWAT_USER);
+-	} 
+-
+ 	if (!new_name) new_name = "";
+ 
+ 	printf("<H2>%s</H2>\n", _("Server Password Management"));
+-- 
+1.7.1
+
package/samba/samba-01CVE-2011-2522.patch new file +749 -0

749 lines not on this page · raw message

package/samba/samba-CVE-2011-0719.patch deleted +0 -613

613 lines not on this page · raw message

package/samba/samba.mk +4 -3
index a3bd63c..dfc7636 100644
@@ -3,9 +3,10 @@
 # samba
 #
 #############################################################
-SAMBA_VERSION:=3.3.14
-SAMBA_SOURCE:=samba-$(SAMBA_VERSION).tar.gz
-SAMBA_SITE:=http://samba.org/samba/ftp/stable/
+
+SAMBA_VERSION = 3.3.15
+SAMBA_SOURCE = samba-$(SAMBA_VERSION).tar.gz
+SAMBA_SITE = http://samba.org/samba/ftp/stable/
 
 SAMBA_SUBDIR = source
 SAMBA_AUTORECONF = NO
Signature · 1 line
1.7.3.4
#4 lore raw

PATCH 3/3 samba: bump to version 3.3.15

Quoted 4 lines · Gustavo Zacarias

Bump samba to version 3.3.15 and add security patches for CVE-2011-2522 and CVE-2011-2694.

Signed-off-by Gustavo Zacarias <[email protected]>

Why does buildroot still stick to such an old version of samba? We are sucessfully using 3.5.9 in our branch (and could, and should, update to 3.5.10 easily). Would you like me to submit a patch to update samba to version 3.5.x ?

Sven

author
#5 lore raw

PATCH 3/3 samba: bump to version 3.3.15

Quoted 7 lines · Sven Neumann

Why does buildroot still stick to such an old version of samba? We are sucessfully using 3.5.9 in our branch (and could, and should, update to 3.5.10 easily). Would you like me to submit a patch to update samba to version 3.5.x ?

Sven

Smaller than newer versions maybe?
I'm just keeping it up to date security-wise.
Sure, submit your patches, we shouldn't keep it old since it probably has new useful features and samba isn't supposed to be so tiny anyway. Didn't do it myself since i use it very lightly.
Regards.

#6 lore raw

PATCH 3/3 samba: bump to version 3.3.15

In reply to Sven Neumann
Quoted 6 lines · Sven Neumann
Quoted 4 lines · Gustavo Zacarias

Bump samba to version 3.3.15 and add security patches for CVE-2011-2522 and CVE-2011-2694.

Signed-off-by Gustavo Zacarias <[email protected]>
Quoted 7 lines

Why does buildroot still stick to such an old version of samba? We are sucessfully using 3.5.9 in our branch (and could, and should, update to 3.5.10 easily). Would you like me to submit a patch to update samba to version 3.5.x ?

Sven

Please post your patch. I just started using 3.5.10, and have been working through problems with the codepages and determining which patches are still relevant. I can at least confirm it builds on powerpc-glibc with no patches and minor samba.mk fixes.

Thanks,
Mike

#7 lore raw

PATCH 3/3 samba: bump to version 3.3.15

In reply to Gustavo Zacarias
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Gustavo" == Gustavo Zacarias <[email protected]> writes:

Gustavo> Bump samba to version 3.3.15 and add security patches for CVE-2011-2522 Gustavo> and CVE-2011-2694.

Committed, thanks.

Signature · 1 line
Bye, Peter Korsgaard
#8 lore raw

PATCH 1/3 iptables: bump to version 1.4.12

In reply to Gustavo Zacarias
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Gustavo" == Gustavo Zacarias <[email protected]> writes:

Gustavo> Bump iptables to version 1.4.12 for linux kernel 3.0 support Gustavo> Signed-off-by: Gustavo Zacarias <[email protected]>

You forgot to rename the patch, but I fixed that - Committed, thanks.

Signature · 1 line
Bye, Peter Korsgaard