Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified)) by mollari.NetBSD.org (Postfix) with ESMTPS id 13C191A9239 for ; Fri, 21 Jan 2022 15:49:28 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 605) id 43A6184EDF; Fri, 21 Jan 2022 15:49:27 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 7BC2484D93 for ; Fri, 21 Jan 2022 15:49:26 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id f8JCvm1iVDg9 for ; Fri, 21 Jan 2022 15:49:25 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id C2E1884D1C for ; Fri, 21 Jan 2022 15:49:25 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id BE274FB24; Fri, 21 Jan 2022 15:49:25 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_164278016576680" MIME-Version: 1.0 Date: Fri, 21 Jan 2022 15:49:25 +0000 From: "Benny Siegert" Subject: CVS commit: [pkgsrc-2021Q4] pkgsrc/net/samba4 To: pkgsrc-changes@NetBSD.org Reply-To: bsiegert@netbsd.org X-Mailer: log_accum Message-Id: <20220121154925.BE274FB24@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_164278016576680 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: bsiegert Date: Fri Jan 21 15:49:25 UTC 2022 Modified Files: pkgsrc/net/samba4 [pkgsrc-2021Q4]: Makefile distinfo Log Message: Pullup ticket #6572 - requested by taca net/samba4: security fix Revisions pulled up: - net/samba4/Makefile 1.135 - net/samba4/distinfo 1.71 --- Module Name: pkgsrc Committed By: taca Date: Mon Jan 10 14:11:16 UTC 2022 Modified Files: pkgsrc/net/samba4: Makefile distinfo Log Message: net/samba4: update to 4.13.16 =============================== Release Notes for Samba 4.13.16 January 10, 2022 =============================== This is a security release in order to address the following defects: o CVE-2021-43566: mkdir race condition allows share escape in Samba 4.x. https://www.samba.org/samba/security/CVE-2021-43566.html ======= Details ======= o CVE-2021-43566: All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS symlink race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for this attack to succeed. Clients that have write access to the exported part of the file system under a share via SMB1 unix extensions or NFS can create symlinks that can race the server by renaming an existing path and then replacing it with a symlink. If the client wins the race it can cause the server to create a directory under the new symlink target after the exported share path check has been done. This new symlink target can point to anywhere on the server file system. The authenticated user must have permissions to create a directory under the target directory of the symlink. This is a difficult race to win, but theoretically possible. Note that the proof of concept code supplied wins the race only when the server is slowed down and put under heavy load. Exploitation of this bug has not been seen in the wild. Changes since 4.13.15 --------------------- o Jeremy Allison * BUG 13979: CVE-2021-43566: mkdir race condition allows share escape in Samba 4.x To generate a diff of this commit: cvs rdiff -u -r1.134 -r1.134.2.1 pkgsrc/net/samba4/Makefile cvs rdiff -u -r1.70 -r1.70.2.1 pkgsrc/net/samba4/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_164278016576680 Content-Disposition: inline Content-Length: 1925 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/net/samba4/Makefile diff -u pkgsrc/net/samba4/Makefile:1.134 pkgsrc/net/samba4/Makefile:1.134.2.1 --- pkgsrc/net/samba4/Makefile:1.134 Sat Dec 25 03:36:01 2021 +++ pkgsrc/net/samba4/Makefile Fri Jan 21 15:49:25 2022 @@ -1,4 +1,4 @@ -# $NetBSD: Makefile,v 1.134 2021/12/25 03:36:01 taca Exp $ +# $NetBSD: Makefile,v 1.134.2.1 2022/01/21 15:49:25 bsiegert Exp $ # WARNING: DO NOT UPDATE WITHOUT RESOLVING THIS ISSUE: # @@ -7,7 +7,7 @@ # # Please do not update without testing on NetBSD 9.2! # -DISTNAME= samba-4.13.15 +DISTNAME= samba-4.13.16 CATEGORIES= net MASTER_SITES= https://download.samba.org/pub/samba/stable/ Index: pkgsrc/net/samba4/distinfo diff -u pkgsrc/net/samba4/distinfo:1.70 pkgsrc/net/samba4/distinfo:1.70.2.1 --- pkgsrc/net/samba4/distinfo:1.70 Sat Dec 25 03:36:01 2021 +++ pkgsrc/net/samba4/distinfo Fri Jan 21 15:49:25 2022 @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.70 2021/12/25 03:36:01 taca Exp $ +$NetBSD: distinfo,v 1.70.2.1 2022/01/21 15:49:25 bsiegert Exp $ -BLAKE2s (samba-4.13.15.tar.gz) = a77479237477a75e1400517ba431beb8417d12f2dfab0037ae956f7682fd54a4 -SHA512 (samba-4.13.15.tar.gz) = dc059650831d6f473d510502a92a8122bba9079f2204cecf375873a160b1d8e60434a8aa01ff479d4e1b7d34b0058b1468a7c8600782c4dbddb16717181acad8 -Size (samba-4.13.15.tar.gz) = 18944873 bytes +BLAKE2s (samba-4.13.16.tar.gz) = c8f818d4334e46db117b152a953f6820868999eca1db5766b60645225fcdf04e +SHA512 (samba-4.13.16.tar.gz) = 8645248327dbc1329db37f649f7514be02cc75dd6531b599a7dd51714699a6a804313135935ecf1567b5ec58910458819d1f0e1849d1e4cddf4bf9713725ffe3 +Size (samba-4.13.16.tar.gz) = 18943308 bytes SHA1 (patch-buildtools_wafsamba_samba__conftests.py) = d927db17124d2bb5b382885e70a41f84c3929926 SHA1 (patch-buildtools_wafsamba_samba__install.py) = d801340617da325e3bb70a90350e45cc8e383c2d SHA1 (patch-buildtools_wafsamba_samba__pidl.py) = e4c0ed3dacfcf5613a5b397b3c6cf88509497da7 --_----------=_164278016576680--