Commit 8075406e authored Dec 17, 2015 by Gustavo Zacarias Committed by Thomas Petazzoni Dec 17, 2015

samba4: security bump to version 4.3.3



Fixes:
CVE-2015-7540 - Remote DoS in Samba (AD) LDAP server
CVE-2015-3223 - Denial of service in Samba Active Directory server
CVE-2015-5252 - Insufficient symlink verification in smbd)
CVE-2015-5299 - Missing access control check in shadow copy code
CVE-2015-5296 - Samba client requesting encryption vulnerable to
downgrade attack
CVE-2015-8467 - Denial of service attack against Windows Active
Directory server
CVE-2015-5330 - Remote memory read in Samba LDAP server

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>

parent 3ce39dd0

package/samba4/samba4.hash

+1 −1

# Locally calculated after checking pgp signature

sha256	61989195caadf0f6fb51ce6bed5e203e6146facc2c276a26ad41901ad9129a75	samba-4.3.2.tar.gz

sha256	e62d21313acbb29e24b0b80aaf2b63fdd1ccce4cfb741f333deca95a1a3a70df	samba-4.3.3.tar.gz

package/samba4/samba4.mk

+1 −1

Original line number	Diff line number	Diff line
		@@ -4,7 +4,7 @@
		#
		################################################################################

		SAMBA4_VERSION = 4.3.2
		SAMBA4_VERSION = 4.3.3
		SAMBA4_SITE = http://ftp.samba.org/pub/samba/stable
		SAMBA4_SOURCE = samba-$(SAMBA4_VERSION).tar.gz
		SAMBA4_INSTALL_STAGING = YES