Public Git Hosting - Samba.git/search

2023-03-20	Joseph Sutton	CVE-2023-0614 s4:dsdb: Use talloc_get_type_abort()... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2023-03-20	Joseph Sutton	CVE-2023-0614 libcli/security: Make some parameters... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-12-14	Joseph Sutton	CVE-2022-37966 kdc: Assume trust objects support AES... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-12-14	Joseph Sutton	CVE-2022-37966 selftest: Run S4U tests against FL2003 DC Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-12-14	Joseph Sutton	CVE-2022-37966 selftest: Add tests for Kerberos session... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-12-14	Joseph Sutton	CVE-2022-37966 tests/krb5: Test different preauth etypes... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-12-14	Joseph Sutton	CVE-2022-37966 samba-tool: Declare explicitly RC4 support... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-12-14	Joseph Sutton	CVE-2022-37966 samba-tool: Fix 'domain trust create... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-12-14	Joseph Sutton	CVE-2022-37966 third_party/heimdal: Fix error message... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-12-14	Joseph Sutton	CVE-2022-37966 param: Add support for new option "kdc... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-12-14	Joseph Sutton	CVE-2022-37967 Add new PAC checksum Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-12-14	Joseph Sutton	CVE-2022-37966 tests/krb5: Add a test requesting tickets... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-12-14	Joseph Sutton	CVE-2022-37966 tests/krb5: Add 'etypes' parameter to... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-12-14	Joseph Sutton	CVE-2022-37966 tests/krb5: Split out _tgs_req() into... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-12-14	Joseph Sutton	CVE-2022-37966 tests/krb5: Add test requesting a TGT... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-11-13	Joseph Sutton	CVE-2022-42898 third_party/heimdal: PAC parse integer... Joseph Sutton <josephsutton@catalyst.net.nz>.	commit \| commitdiff \| tree
2022-11-08	Joseph Sutton	third_party/heimdal: Introduce macro for common plugin... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-10-24	Joseph Sutton	CVE-2022-3437 third_party/heimdal: Pass correct length... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-10-24	Joseph Sutton	CVE-2022-3437 third_party/heimdal: Check for overflow... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-10-24	Joseph Sutton	CVE-2022-3437 third_party/heimdal: Check buffer length... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-10-24	Joseph Sutton	CVE-2022-3437 third_party/heimdal: Check the result... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-10-24	Joseph Sutton	CVE-2022-3437 third_party/heimdal: Avoid undefined... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-10-24	Joseph Sutton	CVE-2022-3437 third_party/heimdal: Don't pass NULL... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-10-24	Joseph Sutton	CVE-2022-3437 third_party/heimdal: Use constant-time... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-10-24	Joseph Sutton	CVE-2022-3437 third_party/heimdal: Use constant-time... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-10-24	Joseph Sutton	CVE-2022-3437 s4/auth/tests: Add unit tests for unwrap_des3() Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-10-24	Joseph Sutton	CVE-2022-3437 third_party/heimdal_build: Add gssapi... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-10-24	Joseph Sutton	CVE-2022-3437 third_party/heimdal: Remove __func__... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s3: Ensure bad password count atomic... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s3:rpc_server: Split change_oem_password... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 dsdb/common: Remove transaction logic... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s4-rpc_server: Extend scope of transaction... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s4-rpc_server: Use user privileges for... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s4-rpc_server: Use authsam_search_account... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	s3:rpc_server: Use BURN_STR() to zero password Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	libcli:auth: Keep passwords from convert_string_talloc... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	lib:util: Check memset_s() error code in talloc_keep_secret_... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s3: Ensure bad password count atomic... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s4:auth_winbind: Check return status... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s4-rpc_server: Check badPwdCount update... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s4:kdc: Check badPwdCount update return... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s4:kdc: Check return status of authsam_logon_... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s4:kdc: Move logon success accounting... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s4:dsdb: Make badPwdCount update atomic Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s4:dsdb: Update bad password count inside... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 s4-auth: Pass through error code from... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 auth4: Detect ACCOUNT_LOCKED_OUT error... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 tests/krb5: Add tests for password lockout... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 lib:crypto: Add Python functions for... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 lib:crypto: Add md4_hash_blob() for... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	CVE-2021-20251 lib:crypto: Add des_crypt_blob_16()... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	lib:crypto: Use constant time memory comparison to... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	lib:crypto: Check for overflow before filling pauth_tag... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	s4:torture: Zero samr_UserInfo union in password set... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	lib:crypto: Zero auth_tag array in encryption test Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-19	Joseph Sutton	s3:rpc_server: Fix typo in error message Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-09-05	Joseph Sutton	WHATSNEW: Document new Protected Users group Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-08-23	Joseph Sutton	libcli/smb: Set error status if 'iov' pointer is NULL Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-08-23	Joseph Sutton	libcli/smb: Ensure we call tevent_req_nterror() on... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4:rpc_server/netlogon: Reconnect to... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4:rpc_server/common: Add dcesrv_samdb_connec... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 dsdb/modules/acl: Allow simultaneous... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 dsdb/modules/acl: Account for sAMAccountName... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4:rpc_server/netlogon: Connect to samdb... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4:rpc_server/netlogon: Always observe... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4:rpc_server/netlogon: Remove dNSHostName... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 dsdb/modules/acl: Handle FORCE_ALLOW_VALIDATE... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 dsdb/common: Add FORCE_ALLOW_VALIDATED_DNS_HO... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 dsdb: Implement validated dNSHostName... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4/dsdb/util: Add function to check... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4/dsdb/util: Add dsdb_msg_get_single_value() Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4:torture/rpc: Fix tests to match Windows Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 tests/py_credentials: Add tests for... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-28	Joseph Sutton	CVE-2022-32743 s4-acl: Add tests for validated dNSHostName... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 testprogs: Add test for short-lived ticket... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kpasswd: Do not accept TGTs as kpasswd... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:auth: Use PAC to determine whether... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 auth: Add ticket type field to auth_user_info_... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 tests/krb5: Add test that we cannot provide... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-32744 s4:kpasswd: Ensure we pass the kpasswd... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-32744 s4:kdc: Modify HDB plugin to only look... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	s4:kdc: Remove kadmin mode from HDB plugin Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-32744 s4:kdc: Rename keytab_name -> kpasswd_keytab_name Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kdc: Don't use strncmp to compare... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 tests/krb5: Test truncated forms of server... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-32744 s4:kdc: Don't allow HDB keytab iteration Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kdc: Reject tickets during the last... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 third_party/heimdal: Add function to... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kdc: Limit kpasswd ticket lifetime... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kdc: Fix canonicalisation of kadmin... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kdc: Refactor samba_kdc_get_entry_principal() Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kdc: Split out a samba_kdc_get_entry_princi... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	s4:kpasswd: Restructure code for clarity Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kpasswd: Require an initial ticket Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 gensec_krb5: Add helper function to check... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kpasswd: Return a kpasswd error code... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 lib:krb5_wrap: Generate valid error codes... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kpasswd: Don't return AP-REP on failure Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 s4:kpasswd: Correctly generate error... Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
2022-07-27	Joseph Sutton	CVE-2022-2031 tests/krb5: Add tests for kpasswd service Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>	commit \| commitdiff \| tree
next

Samba GIT mirror

RSS Atom