1c5dd5d934
Fixes the following security vulnerabilities:
- CVE-2019-3870:
During the provision of a new Active Directory DC, some files in the private/
directory are created world-writable.
https://www.samba.org/samba/security/CVE-2019-3870.html
- CVE-2019-3880:
Authenticated users with write permission can trigger a symlink traversal to
write or detect files outside the Samba share.
https://www.samba.org/samba/security/CVE-2019-3880.html
For more details, see the release notes:
https://www.samba.org/samba/history/samba-4.9.6.html
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| 0001-libreplace-disable-libbsd-support.patch | ||
| 0002-Fix-compilation-of-Samba-4.7.4-with-disabled-ADS.patch | ||
| 0003-Fix-uClibc-build-on-64bit-platforms-by-including-std.patch | ||
| 0004-Disable-build-of-manpages-and-documentation.patch | ||
| Config.in | ||
| S91smb | ||
| samba4-cache.txt | ||
| samba4.hash | ||
| samba4.mk | ||