cbf318b29d
Major features included in the 3.0.25 code base are:
o Significant improvements in the winbind off-line logon support.
o Support for secure DDNS updates as part of the 'net ads join'
process.
o Rewritten IdMap interface which allows for TTL based caching and
per domain backends.
o New plug-in interface for the "winbind nss info" parameter.
o New file change notify subsystem which is able to make use of
inotify on Linux.
o Support for passing Windows security descriptors to a VFS
plug-in allowing for multiple Unix ACL implements to running
side by side on the Same server.
o Improved compatibility with Windows Vista clients including
improved read performance with Linux servers.
o Man pages for IdMap and VFS plug-ins.
Security Fixes included in the Samba 3.0.25 release are:
o CVE-2007-2444
Versions: Samba 3.0.23d - 3.0.25pre2
Local SID/Name translation bug can result in
user privilege elevation
o CVE-2007-2446
Versions: Samba 3.0.0 - 3.0.24
Multiple heap overflows allow remote code execution
o CVE-2007-2447
Versions: Samba 3.0.0 - 3.0.24
Unescaped user input parameters are passed as
arguments to /bin/sh allowing for remote command
execution
PR: ports/112836
Submitted by: maintainer
Approved by: portmgr (self)
20 lines
876 B
C
20 lines
876 B
C
--- ./pam_smbpass/support.c.orig Tue May 23 20:54:32 2006
|
|
+++ ./pam_smbpass/support.c Tue Apr 17 02:06:59 2007
|
|
@@ -384,7 +384,7 @@
|
|
if (newauth != NULL) {
|
|
|
|
/* any previous failures for this user ? */
|
|
- pam_get_data(pamh, data_name, (const void **) &old);
|
|
+ pam_get_data(pamh, data_name, (void **) &old);
|
|
|
|
if (old != NULL) {
|
|
newauth->count = old->count + 1;
|
|
@@ -594,7 +594,7 @@
|
|
|
|
retval = pam_set_data( pamh, data_name, (void *) token, _cleanup );
|
|
if (retval != PAM_SUCCESS
|
|
- || (retval = pam_get_data( pamh, data_name, (const void **)&item ))
|
|
+ || (retval = pam_get_data( pamh, data_name, (void **)&item ))
|
|
!= PAM_SUCCESS)
|
|
{
|
|
_log_err( LOG_CRIT, "error manipulating password data [%s]"
|