The annotated tag, samba-4.17.10 has been created at ec241130921f7d27a94312b1036993daad743d40 (tag) tagging 5eceb0dfb4a6490da3e7fc58f4b527b16b934195 (commit) replaces samba-4.17.9 tagged by Jule Anger on Mon Jul 17 22:20:50 2023 +0200
- Log ----------------------------------------------------------------- samba: tag release samba-4.17.10 -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEgfXigyvSVFoYl7cTqplEL7aAtiAFAmS1oqIACgkQqplEL7aA tiBaPA/5AQuib6r98brMcgTh55ZqUVRYshgTPfWXQLqRvWUOzW4DC3jRWMw69xIV nYm9SxZA6PUswbXUVu4hPKAvsBiOFqh62eimamX61y9UYQTpIw6zI7vzb9HrP7B7 YGUSdkn7IXzBWOgRckGLRKVWhzFcWLnUBQcBuWG4/kAeEUMf5pc42jYKliFQHrX9 l2iJxSdGpBCEo+dl0G5F0AKHXN2jvLDHm/9SuDQqzcQhyrX+gK6GsBHgY/vN3GpQ Yb68A9kE2yZUlgDc7R6QmR6XbK2s7Va4DutLb5wMtxQVTfJ+Trq8w6GGCFgolk7Y esktFAHLYtHNbX6je/chO9TUqaP+Uc6LxK8ylmPzmxWPMF5HOQWFp9czYDti2DCs vpeGc3f20HTaWrmjhuw42IRswmT0DnqBZHB206bq706fzbCbZn9LuN+w4PUJLTlq RUU00XTb3Xs2kQtmAT6nRWA92dMnKuNHnlT8Xm5QjEUFBDVqwSQ5DS29VkczQZ4/ UM2D3a/mL5sy2vFgvFlFsekGGTrpOMOLadK/P3mBnVwT5SMN5jydTcu+WWOizow/ qKi51cYo8SizJBvQcZFK1CjaR9Jc5T/iVGjmC7rpUUEkSsTgqaqNM5ps/NiyBrnW ojvo7eN025Ks4bgkupfK46NscqICMs99eXT+jFaHM7APtaOxM8w= =3zUI -----END PGP SIGNATURE----- Jule Anger (3): VERSION: Bump version up to Samba 4.17.10... WHATSNEW: Add release notes for Samba 4.17.10. VERSION: Disable GIT_SNAPSHOT for the 4.17.10 release. Ralph Boehme (21): CVE-2022-2127: ntlm_auth: cap lanman response length value CVE-2023-34966: CI: test for sl_unpack_loop() CVE-2023-34966: mdssvc: harden sl_unpack_loop() CVE-2023-34967: CI: add a test for type checking of dalloc_value_for_key() CVE-2023-34967: mdssvc: add type checking to dalloc_value_for_key() CVE-2023-34968: mdssvc: cache and reuse stat info in struct sl_inode_path_map CVE-2023-34968: mdssvc: add missing "kMDSStoreMetaScopes" dict key in slrpc_fetch_properties() CVE-2023-34968: mdscli: use correct TALLOC memory context when allocating spotlight_blob CVE-2023-34968: mdscli: remove response blob allocation CVE-2023-34968: smbtorture: remove response blob allocation in mdssvc.c CVE-2023-34968: rpcclient: remove response blob allocation CVE-2023-34968: mdssvc: remove response blob allocation CVE-2023-34968: mdssvc: switch to doing an early return CVE-2023-34968: mdssvc: introduce an allocating wrapper to sl_pack() CVE-2023-34968: mdscli: return share relative paths CVE-2023-34968: mdssvc: return a fake share path CVE-2023-3347: CI: add a test for server-side mandatory signing CVE-2023-3347: smbd: pass lp_ctx to smb[1|2]_srv_init_signing() CVE-2023-3347: smbd: inline smb2_srv_init_signing() code in srv_init_signing() CVE-2023-3347: smbd: remove comment in smbd_smb2_request_process_negprot() CVE-2023-3347: smbd: fix "server signing = mandatory" Stefan Metzmacher (4): netlogon.idl: add support for netr_LogonGetCapabilities response level 2 s4:torture/rpc: let rpc.schannel also check netr_LogonGetCapabilities with different levels s4:rpc_server:netlogon: generate FAULT_INVALID_TAG for invalid netr_LogonGetCapabilities levels s3:rpc_server:netlogon: generate FAULT_INVALID_TAG for invalid netr_LogonGetCapabilities levels Volker Lendecke (1): CVE-2022-2127: winbindd: Fix WINBINDD_PAM_AUTH_CRAP length checks ----------------------------------------------------------------------- -- Samba Shared Repository