SHA256
1
0
forked from pool/samba

Accepting request 950276 from home:npower:update_samba

- Update to 4.15.5
  * CVE-2021-44141: UNIX extensions in SMB1 disclose whether the
    outside target of a symlink exists; (bso#14911);
    (bsc#1193690).
  * CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
    module; (bso#14914); (bsc#1194859).
  * CVE-2022-0336:  Re-adding an SPN skips subsequent SPN
    conflict checks; bso#14950); (bsc#1195048).

- CVE-2021-44141: Information leak via symlinks of existance of
  files or directories outside of the exported share; (bso#14911);
  (bsc#1193690);
- CVE-2021-44142: Out-of-bounds heap read/write vulnerability
  in VFS module vfs_fruit allows code execution; (bso#14914);
  (bsc#1194859);
- CVE-2022-0336: Samba AD users with permission to write to an
  account can impersonate arbitrary services; (bso#14950);
  (bsc#1195048);

OBS-URL: https://build.opensuse.org/request/show/950276
OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/samba?expand=0&rev=659
This commit is contained in:
2022-02-01 09:16:29 +00:00
committed by Git OBS Bridge
parent 3fa268d923
commit ea40c395c9
4 changed files with 29 additions and 4 deletions

View File

@@ -208,7 +208,7 @@ BuildRequires: liburing-devel
%else
%define build_make_smp_mflags %{?jobs:-j%jobs}
%endif
Version: 4.15.4+git.224.dea2f6dc836
Version: 4.15.5+git.328.f1f29505d84
Release: 0
URL: https://www.samba.org/
Obsoletes: samba-32bit < %{version}