Commit Graph

1962 Commits

Author SHA1 Message Date
Jernej Skrabec
6c1cc07900 bluez: install empty bluez.pc
This is needed to convience pulseaudio that bluez is present.
2021-12-08 22:17:13 +01:00
CvH
629317df2a Merge pull request #5939 from SupervisedThinking/bluez
[le11] bluez: update to 5.62
2021-12-08 12:01:06 +01:00
heitbaum
c2d6efc729 samba: add libunwind as a target dependency 2021-12-05 08:30:21 +00:00
SupervisedThinking
fa45dcd946 bluez: update to 5.62
- add configure opt to disable manpages
- drop upstreamed patch
2021-12-02 18:19:08 +01:00
heitbaum
7104aa63d7 ethtool: update to 5.15 2021-11-28 11:56:56 +00:00
Christian Hewitt
609799474b sshpass: fix build on x86_64 2021-11-23 05:44:23 +00:00
heitbaum
423cf56047 iw: update to 5.16 2021-11-20 15:27:54 +11:00
heitbaum
dec5a9460f iwd: update to 1.20 2021-11-20 15:27:49 +11:00
heitbaum
7af3568bd9 samba: update to 4.13.14
update 4.13.13 (2021-10-29) to 4.13.14 (2021-11-09)

release notes: https://www.samba.org/samba/history/samba-4.13.14.html

                   ===============================
                   Release Notes for Samba 4.13.14
                           November 9, 2021
                   ===============================

This is a security release in order to address the following defects:

o CVE-2016-2124:  SMB1 client connections can be downgraded to plaintext
                  authentication.
                  https://www.samba.org/samba/security/CVE-2016-2124.html

o CVE-2020-25717: A user on the domain can become root on domain members.
                  https://www.samba.org/samba/security/CVE-2020-25717.html
                  (PLEASE READ! There are important behaviour changes described)

o CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued
                  by an RODC.
                  https://www.samba.org/samba/security/CVE-2020-25718.html

o CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos
                  tickets.
                  https://www.samba.org/samba/security/CVE-2020-25719.html

o CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers
                  (eg objectSid).
                  https://www.samba.org/samba/security/CVE-2020-25721.html

o CVE-2020-25722: Samba AD DC did not do suffienct access and conformance
                  checking of data stored.
                  https://www.samba.org/samba/security/CVE-2020-25722.html

o CVE-2021-3738:  Use after free in Samba AD DC RPC server.
                  https://www.samba.org/samba/security/CVE-2021-3738.html

o CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability.
                  https://www.samba.org/samba/security/CVE-2021-23192.html

Changes since 4.13.13
---------------------

o  Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
   * CVE-2020-25722

o  Andrew Bartlett <abartlet@samba.org>
   * CVE-2020-25718
   * CVE-2020-25719
   * CVE-2020-25721
   * CVE-2020-25722

o  Ralph Boehme <slow@samba.org>
   * CVE-2020-25717

o  Alexander Bokovoy <ab@samba.org>
   * CVE-2020-25717

o  Samuel Cabrero <scabrero@samba.org>
   * CVE-2020-25717

o  Nadezhda Ivanova <nivanova@symas.com>
   * CVE-2020-25722

o  Stefan Metzmacher <metze@samba.org>
   * CVE-2016-2124
   * CVE-2020-25717
   * CVE-2020-25719
   * CVE-2020-25722
   * CVE-2021-23192
   * CVE-2021-3738
   * ldb: version 2.2.3

o  Andreas Schneider <asn@samba.org>
   * CVE-2020-25719

o  Joseph Sutton <josephsutton@catalyst.net.nz>
   * CVE-2020-17049
   * CVE-2020-25718
   * CVE-2020-25719
   * CVE-2020-25721
   * CVE-2020-25722
   * MS CVE-2020-17049
2021-11-10 18:52:34 +11:00
Christian Hewitt
b3c98526cc sshpass: add initial package 2021-11-05 09:43:59 +00:00
heitbaum
4be46be119 samba: update to 4.13.13
update 4.13.12 (2021-09-22) to 4.13.13 (2021-10-29)

release notes:
- https://www.samba.org/samba/history/samba-4.13.13.html

Changes since 4.13.12
---------------------

o  Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
   * BUG 14868: rodc_rwdc test flaps.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Andrew Bartlett <abartlet@samba.org>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with
     embedded Heimdal.
   * BUG 14836: Python ldb.msg_diff() memory handling failure.
   * BUG 14845: "in" operator on ldb.Message is case sensitive.
   * BUG 14848: Release LDB 2.3.1 for Samba 4.14.9.
   * BUG 14871: Fix Samba support for UF_NO_AUTH_DATA_REQUIRED.
   * BUG 14874: Allow special chars like "@" in samAccountName when generating
     the salt.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Isaac Boukris <iboukris@gmail.com>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Viktor Dukhovni <viktor@twosigma.com>
   * BUG 12998: Fix transit path validation.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Luke Howard <lukeh@padl.com>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Stefan Metzmacher <metze@samba.org>
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  David Mulder <dmulder@suse.com>
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Andreas Schneider <asn@samba.org>
   * BUG 14870: Prepare to operate with MIT krb5 >= 1.20.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Joseph Sutton <josephsutton@catalyst.net.nz>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal.
   * BUG 14645: rpcclient NetFileEnum and net rpc file both cause lock order
     violation: brlock.tdb, share_entries.tdb.
   * BUG 14836: Python ldb.msg_diff() memory handling failure.
   * BUG 14845: "in" operator on ldb.Message is case sensitive.
   * BUG 14848: Release LDB 2.3.1 for Samba 4.14.9.
   * BUG 14868: rodc_rwdc test flaps.
   * BUG 14871: Fix Samba support for UF_NO_AUTH_DATA_REQUIRED.
   * BUG 14874: Allow special chars like "@" in samAccountName when generating
     the salt.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.

o  Nicolas Williams <nico@twosigma.com>
   * BUG 14642: Provide a fix for MS CVE-2020-17049 in Samba [SECURITY] 'Bronze
     bit' S4U2Proxy Constrained Delegation bypass in Samba with embedded Heimdal.
   * BUG 14881: Backport bronze bit fixes, tests, and selftest improvements.
2021-10-30 13:02:27 +11:00
CvH
56f5485fbd Merge pull request #5803 from mglae/le11_wsdd2_initial
wsdd2: initial package v1.8.6
2021-10-27 12:23:45 +02:00
mglae
d38aac52a4 wsdd2: initial package v1.8.6 2021-10-26 18:29:51 +02:00
heitbaum
840b8b873a openssh: update to 8.8p1
update 8.6p1 to 8.8p1

changelog:
- https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/ChangeLog

release notes:
- https://www.openssh.com/releasenotes.html
2021-10-17 08:43:43 +11:00
Dmitry_L
5ad630caeb rpcbind: NFS discovery fix
After update to 1.2.5 NFS servers discovery doesn't work anymore.
In this build added a new configuration flag --enable-rmtcalls which will be needed to enable the remote call functionality.
2021-10-10 17:08:32 +03:00
heitbaum
5cf5025376 samba: update to 4.13.12
release notes:
- https://www.samba.org/samba/history/samba-4.13.12.html
2021-10-02 22:17:12 +10:00
CvH
b51b215af2 Merge pull request #5676 from wagnerch/rsync-le11
[LE11] rsync: add lchmod workaround patches
2021-10-02 13:26:20 +02:00
mglae
5f691cc26b rsync: fix reported version for rsync client 2021-09-23 12:36:18 -04:00
Chad Wagner
0424766dde rsync: add lchmod workaround patches 2021-09-22 19:33:21 -04:00
heitbaum
cfcb219f5d iwd: update to 1.18 2021-09-19 21:29:40 +10:00
heitbaum
404d89da87 wireguard-tools: update to 1.0.20210914 2021-09-19 21:29:40 +10:00
heitbaum
88ec90f82e ethtool: update to 5.14 and HSTS 2021-09-19 21:14:37 +10:00
heitbaum
48dda4db01 openvpn: update to 2.5.3
update 2.4.10 (2020-12-09) to 2.5.3 (2021-06-17)

update to current OpenVPN 2.5.x stream.

Changes: https://github.com/OpenVPN/openvpn/blob/master/Changes.rst
2021-09-10 20:53:39 +10:00
heitbaum
80523c6a1c samba: update to 4.13.11
update 4.13.9 to 4.13.11

release notes:
- https://www.samba.org/samba/history/samba-4.13.10.html
- https://www.samba.org/samba/history/samba-4.13.11.html
2021-09-07 22:04:37 +10:00
Christian Hewitt
850d44e085 Merge pull request #5581 from heitbaum/vfs.sftp
vfs.sftp: update PKG_REV to build with libssh-0.9.6
2021-09-03 09:15:41 +04:00