diff options
author | Johannes Pointner <johannes.pointner@br-automation.com> | 2017-06-13 11:56:48 +0200 |
---|---|---|
committer | Joe MacDonald <joe_macdonald@mentor.com> | 2017-06-28 10:28:27 -0400 |
commit | 88885fc01ae79543dc0fbd4d036a253f52d22ebb (patch) | |
tree | 56d53daa296fb0eafda79bf2c575be64ba09826d | |
parent | c4b9c4886a4a6f70870e4090d9a35b5c1f0d4b90 (diff) | |
download | meta-openembedded-88885fc01ae79543dc0fbd4d036a253f52d22ebb.tar.gz |
samba: upgrade to 4.6.5
This includes a security fix that adresses the following defect:
CVE-2017-7494 (Remote code execution from a writable share)
* Detail release note:
- https://www.samba.org/samba/history/samba-4.6.5.html
* Remove 00-fix-typos-in-man-pages.patch which has been fixed
upstream a long time ago
Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
-rw-r--r-- | meta-networking/recipes-connectivity/samba/samba/00-fix-typos-in-man-pages.patch | 108 | ||||
-rw-r--r-- | meta-networking/recipes-connectivity/samba/samba_4.6.5.bb (renamed from meta-networking/recipes-connectivity/samba/samba_4.6.2.bb) | 5 |
2 files changed, 2 insertions, 111 deletions
diff --git a/meta-networking/recipes-connectivity/samba/samba/00-fix-typos-in-man-pages.patch b/meta-networking/recipes-connectivity/samba/samba/00-fix-typos-in-man-pages.patch deleted file mode 100644 index c94bc31857..0000000000 --- a/meta-networking/recipes-connectivity/samba/samba/00-fix-typos-in-man-pages.patch +++ /dev/null | |||
@@ -1,108 +0,0 @@ | |||
1 | From 1573638212a9733a44939a4d38a226f38dca36f1 Mon Sep 17 00:00:00 2001 | ||
2 | From: Michele Baldessari <michele@acksyn.org> | ||
3 | Date: Tue, 9 Jul 2013 23:23:33 +0200 | ||
4 | Subject: [PATCH] Fix typos in man-pages | ||
5 | |||
6 | Fix some typos in the man-pages. | ||
7 | |||
8 | Signed-off-by: Michele Baldessari <michele@acksyn.org> | ||
9 | Reviewed-by: Simo Sorce <idra@samba.org> | ||
10 | |||
11 | Autobuild-User(master): Simo Sorce <idra@samba.org> | ||
12 | Autobuild-Date(master): Wed Jul 10 16:45:07 CEST 2013 on sn-devel-104 | ||
13 | --- | ||
14 | docs-xml/manpages/dbwrap_tool.1.xml | 2 +- | ||
15 | docs-xml/manpages/idmap_autorid.8.xml | 2 +- | ||
16 | docs-xml/manpages/net.8.xml | 2 +- | ||
17 | docs-xml/manpages/pdbedit.8.xml | 2 +- | ||
18 | docs-xml/manpages/samba.7.xml | 2 +- | ||
19 | docs-xml/manpages/smbclient.1.xml | 2 +- | ||
20 | docs-xml/manpages/smbpasswd.5.xml | 2 +- | ||
21 | docs-xml/manpages/vfs_smb_traffic_analyzer.8.xml | 2 +- | ||
22 | 8 files changed, 8 insertions(+), 8 deletions(-) | ||
23 | |||
24 | Index: samba-4.1.11/docs-xml/manpages/smbstatus.1.xml | ||
25 | =================================================================== | ||
26 | --- samba-4.1.11.orig/docs-xml/manpages/smbstatus.1.xml | ||
27 | +++ samba-4.1.11/docs-xml/manpages/smbstatus.1.xml | ||
28 | @@ -137,6 +137,13 @@ | ||
29 | </listitem> | ||
30 | </varlistentry> | ||
31 | |||
32 | + <varlistentry> | ||
33 | + <term>-n|--numeric</term> | ||
34 | + <listitem><para>causes smbstatus to display numeric UIDs and GIDs instead of | ||
35 | + resolving them to names.</para> | ||
36 | + </listitem> | ||
37 | + </varlistentry> | ||
38 | + | ||
39 | </variablelist> | ||
40 | </refsect1> | ||
41 | |||
42 | Index: samba-4.1.11/docs-xml/manpages/sharesec.1.xml | ||
43 | =================================================================== | ||
44 | --- samba-4.1.11.orig/docs-xml/manpages/sharesec.1.xml | ||
45 | +++ samba-4.1.11/docs-xml/manpages/sharesec.1.xml | ||
46 | @@ -129,6 +129,13 @@ | ||
47 | </para></listitem> | ||
48 | </varlistentry> | ||
49 | |||
50 | + <varlistentry> | ||
51 | + <term>-S|--setsddl=STRING</term> | ||
52 | + <listitem><para> | ||
53 | + Set security descriptor by providing ACL in SDDL format. | ||
54 | + </para></listitem> | ||
55 | + </varlistentry> | ||
56 | + | ||
57 | &stdarg.help; | ||
58 | &stdarg.server.debug; | ||
59 | &popt.common.samba; | ||
60 | Index: samba-4.1.11/docs-xml/build/DTD/samba.entities | ||
61 | =================================================================== | ||
62 | --- samba-4.1.11.orig/docs-xml/build/DTD/samba.entities | ||
63 | +++ samba-4.1.11/docs-xml/build/DTD/samba.entities | ||
64 | @@ -270,6 +270,44 @@ file. | ||
65 | &popt.common.samba; | ||
66 | '> | ||
67 | |||
68 | +<!ENTITY stdarg.signing ' | ||
69 | +<varlistentry> | ||
70 | +<term>-S|--signing on|off|required</term> | ||
71 | +<listitem><para>Set the client signing state. | ||
72 | +</para></listitem> | ||
73 | +</varlistentry> | ||
74 | +'> | ||
75 | + | ||
76 | +<!ENTITY stdarg.machinepass ' | ||
77 | +<varlistentry> | ||
78 | +<term>-P|--machine-pass</term> | ||
79 | +<listitem><para>Use stored machine account password. | ||
80 | +</para></listitem> | ||
81 | +</varlistentry> | ||
82 | +'> | ||
83 | + | ||
84 | +<!ENTITY stdarg.encrypt ' | ||
85 | +<varlistentry> | ||
86 | +<term>-e|--encrypt</term> | ||
87 | +<listitem><para> | ||
88 | +This command line parameter requires the remote | ||
89 | +server support the UNIX extensions or that the SMB3 protocol has been selected. | ||
90 | +Requests that the connection be encrypted. Negotiates SMB encryption using either | ||
91 | +SMB3 or POSIX extensions via GSSAPI. Uses the given credentials for | ||
92 | +the encryption negotiation (either kerberos or NTLMv1/v2 if given | ||
93 | +domain/username/password triple. Fails the connection if encryption | ||
94 | +cannot be negotiated. | ||
95 | +</para></listitem> | ||
96 | +</varlistentry> | ||
97 | +'> | ||
98 | + | ||
99 | +<!ENTITY stdarg.pwnthash ' | ||
100 | +<varlistentry> | ||
101 | +<term>--pw-nt-hash</term> | ||
102 | +<listitem><para>The supplied password is the NT hash. | ||
103 | +</para></listitem> | ||
104 | +</varlistentry> | ||
105 | +'> | ||
106 | |||
107 | <!ENTITY stdarg.resolve.order ' | ||
108 | <varlistentry> | ||
diff --git a/meta-networking/recipes-connectivity/samba/samba_4.6.2.bb b/meta-networking/recipes-connectivity/samba/samba_4.6.5.bb index 7574aefb4d..389a2743ed 100644 --- a/meta-networking/recipes-connectivity/samba/samba_4.6.2.bb +++ b/meta-networking/recipes-connectivity/samba/samba_4.6.5.bb | |||
@@ -12,7 +12,6 @@ ${SAMBA_MIRROR} http://www.mirrorservice.org/sites/ftp.samba.org \n \ | |||
12 | " | 12 | " |
13 | 13 | ||
14 | SRC_URI = "${SAMBA_MIRROR}/stable/samba-${PV}.tar.gz \ | 14 | SRC_URI = "${SAMBA_MIRROR}/stable/samba-${PV}.tar.gz \ |
15 | file://00-fix-typos-in-man-pages.patch \ | ||
16 | file://16-do-not-check-xsltproc-manpages.patch \ | 15 | file://16-do-not-check-xsltproc-manpages.patch \ |
17 | file://20-do-not-import-target-module-while-cross-compile.patch \ | 16 | file://20-do-not-import-target-module-while-cross-compile.patch \ |
18 | file://21-add-config-option-without-valgrind.patch \ | 17 | file://21-add-config-option-without-valgrind.patch \ |
@@ -26,8 +25,8 @@ SRC_URI_append_libc-musl = " \ | |||
26 | file://samba-4.2.7-pam.patch \ | 25 | file://samba-4.2.7-pam.patch \ |
27 | file://samba-4.3.9-remove-getpwent_r.patch \ | 26 | file://samba-4.3.9-remove-getpwent_r.patch \ |
28 | " | 27 | " |
29 | SRC_URI[md5sum] = "461def8190ffc651fd8458b24ca2a622" | 28 | SRC_URI[md5sum] = "2ae8ce2862d8bfa95e4681371ebb1623" |
30 | SRC_URI[sha256sum] = "927afcc16e444718985e3952de92d34e7b776b9ca0238179d866da18a6441c35" | 29 | SRC_URI[sha256sum] = "c06901e1d318b425b8c3ecea3ef23a91e7371312a9ea7adbf34fb8eb42ca3b84" |
31 | 30 | ||
32 | inherit systemd waf-samba cpan-base perlnative update-rc.d | 31 | inherit systemd waf-samba cpan-base perlnative update-rc.d |
33 | # remove default added RDEPENDS on perl | 32 | # remove default added RDEPENDS on perl |