Adolf Belka
61d7aaa3ef
samba: Update to version 4.15.5
...
- Update from 4.14.6 to 4.15.5
- Update of rootfile
- Changelog is too long to include everything. Full details can be found in the
WHATSNEW.txt file in the source tarball. The following highlights those releases
that were security releases. The other releases had a range of bug fixes.
4.15.5 is a security release and includes the following CVE fixes
o CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target
of a symlink exists.
https://www.samba.org/samba/security/CVE-2021-44141.html
o CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module.
https://www.samba.org/samba/security/CVE-2021-44142.html
o CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks.
https://www.samba.org/samba/security/CVE-2022-0336.html
4.15.2 was a security release and included the following CVE fixes
o CVE-2016-2124: SMB1 client connections can be downgraded to plaintext
authentication.
https://www.samba.org/samba/security/CVE-2016-2124.html
o CVE-2020-25717: A user on the domain can become root on domain members.
https://www.samba.org/samba/security/CVE-2020-25717.html
(PLEASE READ! There are important behaviour changes described)
o CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued
by an RODC.
https://www.samba.org/samba/security/CVE-2020-25718.html
o CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos
tickets.
https://www.samba.org/samba/security/CVE-2020-25719.html
o CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers
(eg objectSid).
https://www.samba.org/samba/security/CVE-2020-25721.html
o CVE-2020-25722: Samba AD DC did not do suffienct access and conformance
checking of data stored.
https://www.samba.org/samba/security/CVE-2020-25722.html
o CVE-2021-3738: Use after free in Samba AD DC RPC server.
https://www.samba.org/samba/security/CVE-2021-3738.html
o CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability.
https://www.samba.org/samba/security/CVE-2021-23192.html
4.14.12 was a security release and included the following CVE fixes
o CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module.
https://www.samba.org/samba/security/CVE-2021-44142.html
o CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks.
https://www.samba.org/samba/security/CVE-2022-0336.html
4.14.10 was a security release and included the following CVE fixes
o CVE-2016-2124: SMB1 client connections can be downgraded to plaintext
authentication.
https://www.samba.org/samba/security/CVE-2016-2124.html
o CVE-2020-25717: A user on the domain can become root on domain members.
https://www.samba.org/samba/security/CVE-2020-25717.html
(PLEASE READ! There are important behaviour changes described)
o CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued
by an RODC.
https://www.samba.org/samba/security/CVE-2020-25718.html
o CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos
tickets.
https://www.samba.org/samba/security/CVE-2020-25719.html
o CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers
(eg objectSid).
https://www.samba.org/samba/security/CVE-2020-25721.html
o CVE-2020-25722: Samba AD DC did not do suffienct access and conformance
checking of data stored.
https://www.samba.org/samba/security/CVE-2020-25722.html
o CVE-2021-3738: Use after free in Samba AD DC RPC server.
https://www.samba.org/samba/security/CVE-2021-3738.html
o CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability.
https://www.samba.org/samba/security/CVE-2021-23192.html
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 12:02:36 +00:00
Adolf Belka
6ba00f50c4
sdl2: Update to version 2.0.20
...
- Update from 2.0.18 to 2.0.20
- Update of rootfile
- Changelog
2.0.20:
General:
* SDL_RenderGeometryRaw() takes a pointer to SDL_Color, not int. You can cast color
data in SDL_PIXELFORMAT_RGBA32 format (SDL_PIXELFORMAT_ABGR8888 on little endian
systems) for this parameter.
* Improved accuracy of horizontal and vertical line drawing when using OpenGL or
OpenGLES
* Added the hint SDL_HINT_RENDER_LINE_METHOD to control the method of line drawing
used, to select speed, correctness, and compatibility.
Windows:
* Fixed size of custom cursors
Linux:
* Fixed hotplug controller detection, broken in 2.0.18
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 12:02:21 +00:00
Peter Müller
909732dd80
Core Update 165: Ship zstd
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 12:01:57 +00:00
Adolf Belka
0c18a79b9a
zstd: Update to version 1.5.2
...
- Update from 1.5.1 to 1.5.2
- Update of rootfile
- Changelog
v1.5.2 (Jan, 2022)
perf: Regain Minimal memset()-ing During Reuse of Compression Contexts (@Cyan4973, #2969 )
build: Build Zstd with `noexecstack` on All Architectures (@felixhandte, #2964 )
doc: Clarify Licensing (@terrelln, #2981 )
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 12:01:49 +00:00
Peter Müller
87d4ed3ec6
Core Update 165: Ship manualpages
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 12:00:47 +00:00
Adolf Belka
2b3a9bed2d
manualpages: Update to include addon help links for addons with menu entries
...
- Some addons have menu entries and currentlky these do not have any links to their
help pages
- Ran check_manualpages and confirmed that all links to wiki pages are existing.
- Tested for guardian and wio
Tested-by: Adolf Belka <adolf.belka@ipfire.org >
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 11:59:59 +00:00
Peter Müller
59b79db94b
Core Update 165: Ship OpenSSL
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 11:59:32 +00:00
Peter Müller
cab3054288
OpenSSL: Update to 1.1.1m
...
Full changelog as per https://www.openssl.org/news/cl111.txt :
Changes between 1.1.1l and 1.1.1m [14 Dec 2021]
*) Avoid loading of a dynamic engine twice.
[Bernd Edlinger]
*) Fixed building on Debian with kfreebsd kernels
[Mattias Ellert]
*) Prioritise DANE TLSA issuer certs over peer certs
[Viktor Dukhovni]
*) Fixed random API for MacOS prior to 10.12
These MacOS versions don't support the CommonCrypto APIs
[Lenny Primak]
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-05 11:59:24 +00:00
Roberto Peña
b9e613e405
wio: Add Spanish language file
...
- Update of lfs
- Update of rootfile
- Addition of Spanish file provided by Roberto Peña (listed as author)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
2022-02-05 11:59:04 +00:00
Peter Müller
8ed905e612
Core Update 165: Ship p11-kit
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 11:58:28 +00:00
Peter Müller
aee15210dd
Core Update 165: Ship mdadm
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 11:57:44 +00:00
Peter Müller
7c06760810
Start Core Update 165
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 11:56:12 +00:00
Michael Tremer
7bf1468417
core164: Ship diffutils
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-03 08:30:01 +00:00
Michael Tremer
03ba4b2df2
gdb: Update to 11.2
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-03 08:29:35 +00:00
Michael Tremer
c053efdcd1
Merge remote-tracking branch 'pmueller/temp-c164-development' into next
2022-02-02 19:46:13 +00:00
Stefan Schantl
cd7cb2c36f
rust-indoc: Rootfile update.
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Michael Tremer
84fda83948
rust-paste: Update to 1.0.3
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
b870fa68b1
rust-pyo3-macros: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
d2bd411403
rust-pyo3-macros-backend: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
68051dc5ff
rust-pyo3-build-config: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
3f0d5d3612
rust-inventory: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
90490f8813
rust-inventory-impl: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
b6c8f86e43
rust-ghost: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
d6f294fb16
rust-ctor: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
f72d049dc3
rust-paste: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
92ef302000
rust-paste-impl: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
d9c87622a6
rust-parking_lot: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
eda914944f
rust-parking_lot_core: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
1bd5018994
rust-smallvec: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
202602e0ad
rust-lock_api: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
a75c2b24a6
rust-instant: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
474ee7402f
rust-indoc: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
4c313740a1
rust-indoc-impl: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
f03b79b17b
rust-proc-macro-hack: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
216ac33738
rust-unindent: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
1cdeadd59a
rust-trybuild: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
deb6672b54
rust-serde_derive: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
e837da22af
rust-toml: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
e831bad889
rust-termcolor: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
f51709b480
rust-once_cell: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
9fff2c63ec
rust-glob: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
3749286cce
rust-tempdir: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
d1abeb8e44
rust-remove_dir_all: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
e601c0e3bb
rust-rayon: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
a99886bc1b
rust-rayon-core: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
508f56dc4d
rust-crossbeam-channel: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
fbf9f8a4ba
rust-either: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
d7d3de1470
rust-crossbeam-deque: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
519a98aef3
rust-crossbeam-epoch: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
b0d980bf24
rust-scopeguard: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00