samba 2:4.10.7+dfsg-0ubuntu2.5 source package in Ubuntu

Changelog

samba (2:4.10.7+dfsg-0ubuntu2.5) eoan-security; urgency=medium

  * SECURITY UPDATE: Use-after-free in AD DC LDAP server
    - debian/patches/CVE-2020-10700-1.patch: add test for ASQ and ASQ in
      combination with paged_results in selftest/knownfail.d/asq,
      source4/dsdb/tests/python/asq.py, source4/selftest/tests.py.
    - debian/patches/CVE-2020-10700-3.patch: do not permit the ASQ control
      for the GUID search in paged_results in selftest/knownfail.d/asq,
      source4/dsdb/samdb/ldb_modules/paged_results.c.
    - debian/control: bump libldb-dev, python3-ldb, and python3-ldb-dev
      Build-Depends to 1.5.7.
    - CVE-2020-10700
  * SECURITY UPDATE: Stack overflow in AD DC LDAP server
    - debian/patches/CVE-2020-10704-1.patch: add ASN.1 max tree depth in
      auth/gensec/gensec_util.c, lib/util/asn1.c, lib/util/asn1.h,
      lib/util/tests/asn1_tests.c, libcli/auth/spnego_parse.c,
      libcli/cldap/cldap.c, libcli/ldap/ldap_message.c,
      source3/lib/tldap.c, source3/lib/tldap_util.c,
      source3/libsmb/clispnego.c, source4/auth/gensec/gensec_krb5.c,
      source4/ldap_server/ldap_server.c, source4/libcli/ldap/ldap_client.c,
      source4/libcli/ldap/ldap_controls.c.
    - debian/patches/CVE-2020-10704-3.patch: check parse tree depth in
      lib/util/asn1.c.
    - debian/patches/CVE-2020-10704-6.patch: add max ldap request sizes in
      docs-xml/smbdotconf/ldap/ldapmaxanonrequest.xml,
      docs-xml/smbdotconf/ldap/ldapmaxauthrequest.xml,
      lib/param/loadparm.c, source3/param/loadparm.c.
    - debian/patches/CVE-2020-10704-7.patch: limit request sizes in
      source4/ldap_server/ldap_server.c.
    - debian/patches/CVE-2020-10704-8.patch: add search size limits to
      ldap_decode in docs-xml/smbdotconf/ldap/ldapmaxsearchrequest.xml,
      lib/param/loadparm.c, libcli/cldap/cldap.c,
      libcli/ldap/ldap_message.c, libcli/ldap/ldap_message.h,
      source3/param/loadparm.c, source4/ldap_server/ldap_server.c,
      source4/libcli/ldap/ldap_client.c.
    - debian/patches/CVE-2020-10704-9.patch: check search request lengths
      in lib/util/asn1.c, lib/util/asn1.h, libcli/ldap/ldap_message.c.
    - CVE-2020-10704

 -- Marc Deslauriers <email address hidden>  Wed, 22 Apr 2020 09:56:07 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Eoan
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
samba_4.10.7+dfsg.orig.tar.xz 11.1 MiB 5dbd6f31e8e3cd2d94f773167f359efeeebab41c537a6d4950114f69237810e2
samba_4.10.7+dfsg-0ubuntu2.5.debian.tar.xz 267.4 KiB 78da581f5caff87d1584898fb6195fdf0ae2f8254771faccd31acecc1f9391bd
samba_4.10.7+dfsg-0ubuntu2.5.dsc 4.1 KiB c4d260c0b85fd3e86db4116af7a134cf921394a93c9184242e7102543c76992a

View changes file

Binary packages built by this source

ctdb: No summary available for ctdb in ubuntu eoan.

No description available for ctdb in ubuntu eoan.

ctdb-dbgsym: No summary available for ctdb-dbgsym in ubuntu eoan.

No description available for ctdb-dbgsym in ubuntu eoan.

libnss-winbind: No summary available for libnss-winbind in ubuntu eoan.

No description available for libnss-winbind in ubuntu eoan.

libnss-winbind-dbgsym: No summary available for libnss-winbind-dbgsym in ubuntu eoan.

No description available for libnss-winbind-dbgsym in ubuntu eoan.

libpam-winbind: No summary available for libpam-winbind in ubuntu eoan.

No description available for libpam-winbind in ubuntu eoan.

libpam-winbind-dbgsym: No summary available for libpam-winbind-dbgsym in ubuntu eoan.

No description available for libpam-winbind-dbgsym in ubuntu eoan.

libparse-pidl-perl: No summary available for libparse-pidl-perl in ubuntu eoan.

No description available for libparse-pidl-perl in ubuntu eoan.

libsmbclient: No summary available for libsmbclient in ubuntu eoan.

No description available for libsmbclient in ubuntu eoan.

libsmbclient-dbgsym: No summary available for libsmbclient-dbgsym in ubuntu eoan.

No description available for libsmbclient-dbgsym in ubuntu eoan.

libsmbclient-dev: No summary available for libsmbclient-dev in ubuntu eoan.

No description available for libsmbclient-dev in ubuntu eoan.

libwbclient-dev: No summary available for libwbclient-dev in ubuntu eoan.

No description available for libwbclient-dev in ubuntu eoan.

libwbclient0: No summary available for libwbclient0 in ubuntu eoan.

No description available for libwbclient0 in ubuntu eoan.

libwbclient0-dbgsym: No summary available for libwbclient0-dbgsym in ubuntu eoan.

No description available for libwbclient0-dbgsym in ubuntu eoan.

python3-samba: No summary available for python3-samba in ubuntu eoan.

No description available for python3-samba in ubuntu eoan.

python3-samba-dbgsym: No summary available for python3-samba-dbgsym in ubuntu eoan.

No description available for python3-samba-dbgsym in ubuntu eoan.

registry-tools: No summary available for registry-tools in ubuntu eoan.

No description available for registry-tools in ubuntu eoan.

registry-tools-dbgsym: No summary available for registry-tools-dbgsym in ubuntu eoan.

No description available for registry-tools-dbgsym in ubuntu eoan.

samba: No summary available for samba in ubuntu eoan.

No description available for samba in ubuntu eoan.

samba-common: No summary available for samba-common in ubuntu eoan.

No description available for samba-common in ubuntu eoan.

samba-common-bin: No summary available for samba-common-bin in ubuntu eoan.

No description available for samba-common-bin in ubuntu eoan.

samba-common-bin-dbgsym: No summary available for samba-common-bin-dbgsym in ubuntu eoan.

No description available for samba-common-bin-dbgsym in ubuntu eoan.

samba-dbgsym: No summary available for samba-dbgsym in ubuntu eoan.

No description available for samba-dbgsym in ubuntu eoan.

samba-dev: No summary available for samba-dev in ubuntu eoan.

No description available for samba-dev in ubuntu eoan.

samba-dsdb-modules: No summary available for samba-dsdb-modules in ubuntu eoan.

No description available for samba-dsdb-modules in ubuntu eoan.

samba-dsdb-modules-dbgsym: No summary available for samba-dsdb-modules-dbgsym in ubuntu eoan.

No description available for samba-dsdb-modules-dbgsym in ubuntu eoan.

samba-libs: No summary available for samba-libs in ubuntu eoan.

No description available for samba-libs in ubuntu eoan.

samba-libs-dbgsym: No summary available for samba-libs-dbgsym in ubuntu eoan.

No description available for samba-libs-dbgsym in ubuntu eoan.

samba-testsuite: No summary available for samba-testsuite in ubuntu eoan.

No description available for samba-testsuite in ubuntu eoan.

samba-testsuite-dbgsym: No summary available for samba-testsuite-dbgsym in ubuntu eoan.

No description available for samba-testsuite-dbgsym in ubuntu eoan.

samba-vfs-modules: No summary available for samba-vfs-modules in ubuntu eoan.

No description available for samba-vfs-modules in ubuntu eoan.

samba-vfs-modules-dbgsym: No summary available for samba-vfs-modules-dbgsym in ubuntu eoan.

No description available for samba-vfs-modules-dbgsym in ubuntu eoan.

smbclient: No summary available for smbclient in ubuntu eoan.

No description available for smbclient in ubuntu eoan.

smbclient-dbgsym: No summary available for smbclient-dbgsym in ubuntu eoan.

No description available for smbclient-dbgsym in ubuntu eoan.

winbind: No summary available for winbind in ubuntu eoan.

No description available for winbind in ubuntu eoan.

winbind-dbgsym: No summary available for winbind-dbgsym in ubuntu eoan.

No description available for winbind-dbgsym in ubuntu eoan.