Skip to contentSkip to conversation

samba4: security bump to version 4.3.3

PATCH New Gustavo Zacarias 2 participants 2 messages Dec 17, 2015

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 samba4: security bump to version 4.3.3

Fixes:
CVE-2015-7540 - Remote DoS in Samba (AD) LDAP server CVE-2015-3223 - Denial of service in Samba Active Directory server CVE-2015-5252 - Insufficient symlink verification in smbd) CVE-2015-5299 - Missing access control check in shadow copy code CVE-2015-5296 - Samba client requesting encryption vulnerable to downgrade attack
CVE-2015-8467 - Denial of service attack against Windows Active Directory server
CVE-2015-5330 - Remote memory read in Samba LDAP server

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/samba4/samba4.hash | 2 +-
 package/samba4/samba4.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
package/samba4/samba4.hash +1 -1
index 2959e5b..494ad17 100644
@@ -1,2 +1,2 @@
 # Locally calculated after checking pgp signature
-sha256	61989195caadf0f6fb51ce6bed5e203e6146facc2c276a26ad41901ad9129a75	samba-4.3.2.tar.gz
+sha256	e62d21313acbb29e24b0b80aaf2b63fdd1ccce4cfb741f333deca95a1a3a70df	samba-4.3.3.tar.gz
package/samba4/samba4.mk +1 -1
index 388a40c..50a2692 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-SAMBA4_VERSION = 4.3.2
+SAMBA4_VERSION = 4.3.3
 SAMBA4_SITE = http://ftp.samba.org/pub/samba/stable
 SAMBA4_SOURCE = samba-$(SAMBA4_VERSION).tar.gz
 SAMBA4_INSTALL_STAGING = YES
Signature · 1 line
2.4.10
Applied
#1 lore raw

PATCH 1/1 samba4: security bump to version 4.3.3

Dear Gustavo Zacarias,

Quoted 11 lines · Gustavo Zacarias

Fixes:
CVE-2015-7540 - Remote DoS in Samba (AD) LDAP server CVE-2015-3223 - Denial of service in Samba Active Directory server CVE-2015-5252 - Insufficient symlink verification in smbd) CVE-2015-5299 - Missing access control check in shadow copy code CVE-2015-5296 - Samba client requesting encryption vulnerable to downgrade attack
CVE-2015-8467 - Denial of service attack against Windows Active Directory server
CVE-2015-5330 - Remote memory read in Samba LDAP server

Quoted 5 lines
Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/samba4/samba4.hash | 2 +-
 package/samba4/samba4.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

Applied, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com