Commit Graph

1957 Commits

Author SHA1 Message Date
Christian Hewitt
609799474b sshpass: fix build on x86_64 2021-11-23 05:44:23 +00:00
heitbaum
423cf56047 iw: update to 5.16 2021-11-20 15:27:54 +11:00
heitbaum
dec5a9460f iwd: update to 1.20 2021-11-20 15:27:49 +11:00
heitbaum
7af3568bd9 samba: update to 4.13.14
update 4.13.13 (2021-10-29) to 4.13.14 (2021-11-09)

release notes: https://www.samba.org/samba/history/samba-4.13.14.html

                   ===============================
                   Release Notes for Samba 4.13.14
                           November 9, 2021
                   ===============================

This is a security release in order to address the following defects:

o CVE-2016-2124:  SMB1 client connections can be downgraded to plaintext
                  authentication.
                  https://www.samba.org/samba/security/CVE-2016-2124.html

o CVE-2020-25717: A user on the domain can become root on domain members.
                  https://www.samba.org/samba/security/CVE-2020-25717.html
                  (PLEASE READ! There are important behaviour changes described)

o CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued
                  by an RODC.
                  https://www.samba.org/samba/security/CVE-2020-25718.html

o CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos
                  tickets.
                  https://www.samba.org/samba/security/CVE-2020-25719.html

o CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers
                  (eg objectSid).
                  https://www.samba.org/samba/security/CVE-2020-25721.html

o CVE-2020-25722: Samba AD DC did not do suffienct access and conformance
                  checking of data stored.
                  https://www.samba.org/samba/security/CVE-2020-25722.html

o CVE-2021-3738:  Use after free in Samba AD DC RPC server.
                  https://www.samba.org/samba/security/CVE-2021-3738.html

o CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability.
                  https://www.samba.org/samba/security/CVE-2021-23192.html

Changes since 4.13.13
---------------------

o  Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
   * CVE-2020-25722

o  Andrew Bartlett <abartlet@samba.org>
   * CVE-2020-25718
   * CVE-2020-25719
   * CVE-2020-25721
   * CVE-2020-25722

o  Ralph Boehme <slow@samba.org>
   * CVE-2020-25717

o  Alexander Bokovoy <ab@samba.org>
   * CVE-2020-25717

o  Samuel Cabrero <scabrero@samba.org>
   * CVE-2020-25717

o  Nadezhda Ivanova <nivanova@symas.com>
   * CVE-2020-25722

o  Stefan Metzmacher <metze@samba.org>
   * CVE-2016-2124
   * CVE-2020-25717
   * CVE-2020-25719
   * CVE-2020-25722
   * CVE-2021-23192
   * CVE-2021-3738
   * ldb: version 2.2.3

o  Andreas Schneider <asn@samba.org>
   * CVE-2020-25719

o  Joseph Sutton <josephsutton@catalyst.net.nz>
   * CVE-2020-17049
   * CVE-2020-25718
   * CVE-2020-25719
   * CVE-2020-25721
   * CVE-2020-25722
   * MS CVE-2020-17049
2021-11-10 18:52:34 +11:00
Christian Hewitt
b3c98526cc sshpass: add initial package 2021-11-05 09:43:59 +00:00
heitbaum
4be46be119 samba: update to 4.13.13
update 4.13.12 (2021-09-22) to 4.13.13 (2021-10-29)

release notes:
- https://www.samba.org/samba/history/samba-4.13.13.html

Changes since 4.13.12
---------------------

o  Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
   * BUG 14868: rodc_rwdc test flaps.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Andrew Bartlett <abartlet@samba.org>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with
     embedded Heimdal.
   * BUG 14836: Python ldb.msg_diff() memory handling failure.
   * BUG 14845: "in" operator on ldb.Message is case sensitive.
   * BUG 14848: Release LDB 2.3.1 for Samba 4.14.9.
   * BUG 14871: Fix Samba support for UF_NO_AUTH_DATA_REQUIRED.
   * BUG 14874: Allow special chars like "@" in samAccountName when generating
     the salt.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Isaac Boukris <iboukris@gmail.com>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Viktor Dukhovni <viktor@twosigma.com>
   * BUG 12998: Fix transit path validation.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Luke Howard <lukeh@padl.com>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Stefan Metzmacher <metze@samba.org>
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  David Mulder <dmulder@suse.com>
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Andreas Schneider <asn@samba.org>
   * BUG 14870: Prepare to operate with MIT krb5 >= 1.20.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Joseph Sutton <josephsutton@catalyst.net.nz>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal.
   * BUG 14645: rpcclient NetFileEnum and net rpc file both cause lock order
     violation: brlock.tdb, share_entries.tdb.
   * BUG 14836: Python ldb.msg_diff() memory handling failure.
   * BUG 14845: "in" operator on ldb.Message is case sensitive.
   * BUG 14848: Release LDB 2.3.1 for Samba 4.14.9.
   * BUG 14868: rodc_rwdc test flaps.
   * BUG 14871: Fix Samba support for UF_NO_AUTH_DATA_REQUIRED.
   * BUG 14874: Allow special chars like "@" in samAccountName when generating
     the salt.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Nicolas Williams <nico@twosigma.com>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.
2021-10-30 13:02:27 +11:00
CvH
56f5485fbd Merge pull request #5803 from mglae/le11_wsdd2_initial
wsdd2: initial package v1.8.6
2021-10-27 12:23:45 +02:00
mglae
d38aac52a4 wsdd2: initial package v1.8.6 2021-10-26 18:29:51 +02:00
heitbaum
840b8b873a openssh: update to 8.8p1
update 8.6p1 to 8.8p1

changelog:
- https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/ChangeLog

release notes:
- https://www.openssh.com/releasenotes.html
2021-10-17 08:43:43 +11:00
Dmitry_L
5ad630caeb rpcbind: NFS discovery fix
After update to 1.2.5 NFS servers discovery doesn't work anymore.
In this build added a new configuration flag --enable-rmtcalls which will be needed to enable the remote call functionality.
2021-10-10 17:08:32 +03:00
heitbaum
5cf5025376 samba: update to 4.13.12
release notes:
- https://www.samba.org/samba/history/samba-4.13.12.html
2021-10-02 22:17:12 +10:00
CvH
b51b215af2 Merge pull request #5676 from wagnerch/rsync-le11
[LE11] rsync: add lchmod workaround patches
2021-10-02 13:26:20 +02:00
mglae
5f691cc26b rsync: fix reported version for rsync client 2021-09-23 12:36:18 -04:00
Chad Wagner
0424766dde rsync: add lchmod workaround patches 2021-09-22 19:33:21 -04:00
heitbaum
cfcb219f5d iwd: update to 1.18 2021-09-19 21:29:40 +10:00
heitbaum
404d89da87 wireguard-tools: update to 1.0.20210914 2021-09-19 21:29:40 +10:00
heitbaum
88ec90f82e ethtool: update to 5.14 and HSTS 2021-09-19 21:14:37 +10:00
heitbaum
48dda4db01 openvpn: update to 2.5.3
update 2.4.10 (2020-12-09) to 2.5.3 (2021-06-17)

update to current OpenVPN 2.5.x stream.

Changes: https://github.com/OpenVPN/openvpn/blob/master/Changes.rst
2021-09-10 20:53:39 +10:00
heitbaum
80523c6a1c samba: update to 4.13.11
update 4.13.9 to 4.13.11

release notes:
- https://www.samba.org/samba/history/samba-4.13.10.html
- https://www.samba.org/samba/history/samba-4.13.11.html
2021-09-07 22:04:37 +10:00
Christian Hewitt
850d44e085 Merge pull request #5581 from heitbaum/vfs.sftp
vfs.sftp: update PKG_REV to build with libssh-0.9.6
2021-09-03 09:15:41 +04:00
heitbaum
8a43d98a1c iwd: update to 1.17
update 1.11 (2021-01-07) to 1.17 (2021-08-22)
changelog: https://git.kernel.org/pub/scm/network/wireless/iwd.git/tree/ChangeLog

ver 1.17:
- Fix issue with sending additional and vendor IEs.
- Fix issue with IE ordering for 802.11-2020 support.
- Fix issue with frequency update on channel switch events.
- Fix issue with drivers and handling of IF_OPER_UP setting.

ver 1.16:
- Fix issue with writing provisioning files with a passphrase.
- Add support for Authenticator & Supplicant RSN Extension elements.
- Add support for handling Transition Disable info.
- Add support for SAE Hash-to-Element feature.

ver 1.15:
- Add support for FT-over-DS procedure with multiple BSS.
- Add support for estimation of VHT RX data rate.
- Add support for exporting Daemon information.

ver 1.14:
- Fix issue with scanning property and quick scan cancellation.
- Fix issue with handling authentication timeouts from SAE.
- Fix issue with handling association timeouts and retries.
- Fix issue with handling roaming frequencies after roaming.
- Fix issue with requesting neighbor report after roaming.
- Add support for handling PSK offload connections.

ver 1.13:
- Fix issue with EAPoL protocol version 2010 handling.
- Fix issue with authenticator method logic handling.
- Fix issue with getting scan results from firmware.
- Add support for handling SAE offload connections.
- Add support for roaming with FullMAC devices.

ver 1.12:
- Fix issue with handling retry roaming without higher RSSI.
- Fix issue with WPA3, OWE and FILS authentication handling.
- Fix issue with handling locally generated deauth frames.
- Fix issue with quick scanning and connect interaction.
- Add support for diagnostic D-Bus interfaces.
2021-09-01 08:38:09 +10:00
heitbaum
b9fbc66992 libssh: update to 0.9.6
security release
ann: https://www.libssh.org/2021/08/26/libssh-0-9-6-security-release/
2021-08-29 13:56:18 +10:00
heitbaum
8f7e2377b1 wireless-regdb: update to 2021.08.28
update 2021.04.21 to 2021.08.28

Release notes:

2021-08-28: Released
2021-08-28 wireless-regdb: update regulatory database based on preceding changes
2021-08-27 Update regulatory rules for Ecuador (EC)
2021-08-06 wireless-regdb: Update regulatory rules for Norway (NO) on 6 and 60 GHz
2021-08-02 wireless-regdb: Update regulatory rules for Germany (DE) on 6GHz
2021-07-14: Released
2021-07-14 wireless-regdb: update regulatory database based on preceding changes
2021-07-14 wireless-regdb: reduce bandwidth for 5730-5850 and 5850-5895 MHz in US
2021-07-08 wireless-regdb: remove PTMP-ONLY from 5850-5895 MHz for US
2021-07-06 wireless-regdb: recent FCC report and order allows 5850-5895 immediately
2021-06-08 wireless-regdb: update 5725-5850 MHz rule for GB
2021-08-29 13:50:09 +10:00
CvH
04bb47463d Merge pull request #5327 from heitbaum/ssh
openssh: update to 8.6p1
2021-08-11 13:09:02 +02:00
CvH
f0660a2a18 Merge pull request #5479 from heitbaum/ao3
connman: update to 1.40
2021-08-11 12:58:12 +02:00