Update samba to 3.6.23.

==============================
                   Release Notes for Samba 3.6.23
                           March 11, 2014
                   ==============================


This is a security release in order to address
CVE-2013-4496 (Password lockout not enforced for SAMR password changes).

o  CVE-2013-4496:
   Samba versions 3.4.0 and above allow the administrator to implement
   locking out Samba accounts after a number of bad password attempts.

   However, all released versions of Samba did not implement this check for
   password changes, such as are available over multiple SAMR and RAP
   interfaces, allowing password guessing attacks.
This commit is contained in:
taca 2014-03-17 14:01:57 +00:00
parent 4f069e6dd8
commit 250dd9b10a
2 changed files with 6 additions and 7 deletions

View file

@ -1,7 +1,6 @@
# $NetBSD: Makefile,v 1.246 2014/03/13 11:08:52 jperkin Exp $
# $NetBSD: Makefile,v 1.247 2014/03/17 14:01:57 taca Exp $
DISTNAME= samba-${VERSION}
PKGREVISION= 2
CATEGORIES= net
MASTER_SITES= ${SAMBA_MIRRORS:=stable/}
@ -10,7 +9,7 @@ HOMEPAGE= http://www.samba.org/
COMMENT= SMB/CIFS protocol server suite
LICENSE= gnu-gpl-v3
VERSION= 3.6.22
VERSION= 3.6.23
CONFLICTS+= ja-samba-[0-9]* pam-smbpass-[0-9]* winbind-[0-9]*
USE_GCC_RUNTIME= yes

View file

@ -1,8 +1,8 @@
$NetBSD: distinfo,v 1.97 2014/03/03 08:15:10 obache Exp $
$NetBSD: distinfo,v 1.98 2014/03/17 14:01:57 taca Exp $
SHA1 (samba-3.6.22.tar.gz) = e4ce4a273cc264b01d928f1bb59f0dc38dd65f9b
RMD160 (samba-3.6.22.tar.gz) = 66063045f4c3232764528ce7571dd336591001e4
Size (samba-3.6.22.tar.gz) = 34122131 bytes
SHA1 (samba-3.6.23.tar.gz) = 5ba2f8323ab17fa6c04bf87c11d20f10a4fcfe17
RMD160 (samba-3.6.23.tar.gz) = 43dc3b5dcc2ee515bed03ad77b9726841faea946
Size (samba-3.6.23.tar.gz) = 34122387 bytes
SHA1 (patch-aa) = 6c8497adce78e8b1dea2a0402d4a980b67b57b8e
SHA1 (patch-ab) = eb680f72ab0118e57d1b322aba869ac798b27e17
SHA1 (patch-ac) = 25edbd616199b7dcb41f87aa1374d0bdf19cafec