Go to file
Peter Korsgaard df75c954bc samba4: security bump to version 4.6.11
Fixes the following security issues:

 - CVE-2017-14746:
   All versions of Samba from 4.0.0 onwards are vulnerable to a use after
   free vulnerability, where a malicious SMB1 request can be used to
   control the contents of heap memory via a deallocated heap pointer. It
   is possible this may be used to compromise the SMB server.

 - CVE-2017-15275:
   All versions of Samba from 3.6.0 onwards are vulnerable to a heap
   memory information leak, where server allocated heap memory may be
   returned to the client without being cleared.

   There is no known vulnerability associated with this error, but
   uncleared heap memory may contain previously used data that may help
   an attacker compromise the server via other methods. Uncleared heap
   memory may potentially contain password hashes or other high-value
   data.

For more details, see the release notes:
https://www.samba.org/samba/history/samba-4.6.11.html

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-11-22 21:30:35 +01:00
arch
board board: bananapi-m1: Fix to use dtb instead of dts 2017-11-18 21:03:04 +01:00
boot uboot: use local libfdt.h 2017-11-06 21:25:31 +01:00
configs orange-pi-one: bump kernel and uboot versions 2017-11-06 11:43:10 +01:00
docs Revert "pkg-download: remove explicit PKG_VERSION from github helper" 2017-11-14 13:55:39 +01:00
fs fs: add missing $$(sep) to pre- and post-command hooks code 2017-11-05 17:52:27 +01:00
linux linux: bump default to version 4.13.13 2017-11-15 22:35:50 +01:00
package samba4: security bump to version 4.6.11 2017-11-22 21:30:35 +01:00
support support/config-fragments: update ARC pre-built toolchain 2017-11-17 23:40:57 +01:00
system
toolchain toolchain/wrapper: fake __DATE_ and __TIME__ for older gcc 2017-10-22 16:10:37 +02:00
utils
.defconfig
.flake8 .flake8: add config file for Python code style 2017-10-06 19:05:18 +02:00
.gitignore
.gitlab-ci.yml .gitlab-ci.yml: use gitlab 9.0 varaible names 2017-11-05 15:53:46 +01:00
.gitlab-ci.yml.in .gitlab-ci.yml: use gitlab 9.0 varaible names 2017-11-05 15:53:46 +01:00
CHANGES Update for 2017.11-rc2 2017-11-13 22:28:15 +01:00
Config.in toolchain/wrapper: fake __DATE_ and __TIME__ for older gcc 2017-10-22 16:10:37 +02:00
Config.in.legacy rfkill: remove package 2017-11-03 17:21:14 +01:00
COPYING
DEVELOPERS DEVELOPERS: update email address 2017-11-16 17:10:03 +01:00
Makefile Update for 2017.11-rc2 2017-11-13 22:28:15 +01:00
Makefile.legacy
README

Buildroot is a simple, efficient and easy-to-use tool to generate embedded
Linux systems through cross-compilation.

The documentation can be found in docs/manual. You can generate a text
document with 'make manual-text' and read output/docs/manual/manual.text.
Online documentation can be found at http://buildroot.org/docs.html

To build and use the buildroot stuff, do the following:

1) run 'make menuconfig'
2) select the target architecture and the packages you wish to compile
3) run 'make'
4) wait while it compiles
5) find the kernel, bootloader, root filesystem, etc. in output/images

You do not need to be root to build or run buildroot.  Have fun!

Buildroot comes with a basic configuration for a number of boards. Run
'make list-defconfigs' to view the list of provided configurations.

Please feed suggestions, bug reports, insults, and bribes back to the
buildroot mailing list: buildroot@buildroot.org
You can also find us on #buildroot on Freenode IRC.

If you would like to contribute patches, please read
https://buildroot.org/manual.html#submitting-patches