diff options
| author | Hauke Mehrtens <hauke@hauke-m.de> | 2018-04-01 15:48:47 +0200 |
|---|---|---|
| committer | Hauke Mehrtens <hauke@hauke-m.de> | 2018-04-03 23:26:45 +0200 |
| commit | 9aaa23ec8baa50b63d33466f3f353e43c473952a (patch) | |
| tree | 4c25fb285469828b15d8f07a117ee5578da9a7e4 /package/network/services/samba36/patches/200-remove_printer_support.patch | |
| parent | d6d3db05436952f68f47d35df58ad5050b1f2d66 (diff) | |
| download | upstream-9aaa23ec8baa50b63d33466f3f353e43c473952a.tar.gz upstream-9aaa23ec8baa50b63d33466f3f353e43c473952a.tar.bz2 upstream-9aaa23ec8baa50b63d33466f3f353e43c473952a.zip | |
samba36: fix some security problems
This Adds fixes for the following security problems based on debians patches:
CVE-2016-2125: Unconditional privilege delegation to Kerberos servers in trusted realms
CVE-2017-12163: Server memory information leak over SMB1
CVE-2017-12150: SMB1/2/3 connections may not require signing where they should
CVE-2018-1050: Denial of Service Attack on external print server.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Diffstat (limited to 'package/network/services/samba36/patches/200-remove_printer_support.patch')
| -rw-r--r-- | package/network/services/samba36/patches/200-remove_printer_support.patch | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/package/network/services/samba36/patches/200-remove_printer_support.patch b/package/network/services/samba36/patches/200-remove_printer_support.patch index de567a7627..90f13feb0d 100644 --- a/package/network/services/samba36/patches/200-remove_printer_support.patch +++ b/package/network/services/samba36/patches/200-remove_printer_support.patch @@ -51,7 +51,7 @@ d_printf(_("Usage:\n")); --- a/source3/smbd/reply.c +++ b/source3/smbd/reply.c -@@ -5208,7 +5208,11 @@ void reply_printopen(struct smb_request +@@ -5255,7 +5255,11 @@ void reply_printopen(struct smb_request return; } @@ -64,7 +64,7 @@ reply_nterror(req, NT_STATUS_ACCESS_DENIED); END_PROFILE(SMBsplopen); return; -@@ -5314,7 +5318,10 @@ void reply_printqueue(struct smb_request +@@ -5361,7 +5365,10 @@ void reply_printqueue(struct smb_request is really quite gross and only worked when there was only one printer - I think we should now only accept it if they get it right (tridge) */ |