Accepted samba 2:4.18.5+dfsg-1 (source) into unstable

Debian FTP Masters Wed, 19 Jul 2023 08:38:34 -0700
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 19 Jul 2023 17:55:58 +0300
Source: samba
Architecture: source
Version: 2:4.18.5+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Samba Maintainers <pkg-samba-ma...@lists.alioth.debian.org>
Changed-By: Michael Tokarev <m...@tls.msk.ru>
Closes: 1041043
Changes:
 samba (2:4.18.5+dfsg-1) unstable; urgency=medium
 .
   * new upstream stable/security release 4.18.5, including:
    o CVE-2022-2127:  When winbind is used for NTLM authentication,
      a maliciously crafted request can trigger an out-of-bounds read
      in winbind and possibly crash it.
      https://www.samba.org/samba/security/CVE-2022-2127.html
    o CVE-2023-3347:  SMB2 packet signing is not enforced if an admin
      configured "server signing = required" or for SMB2 connections to
      Domain Controllers where SMB2 packet signing is mandatory.
      https://www.samba.org/samba/security/CVE-2023-3347.html
    o CVE-2023-34966: An infinite loop bug in Samba's mdssvc RPC service
      for Spotlight can be triggered by an unauthenticated attacker by
      issuing a malformed RPC request.
      https://www.samba.org/samba/security/CVE-2023-34966.html
    o CVE-2023-34967: Missing type validation in Samba's mdssvc RPC service
      for Spotlight can be used by an unauthenticated attacker to trigger
      a process crash in a shared RPC mdssvc worker process.
      https://www.samba.org/samba/security/CVE-2023-34967.html
    o CVE-2023-34968: As part of the Spotlight protocol Samba discloses
      the server-side absolute path of shares and files and directories
      in search results.
      https://www.samba.org/samba/security/CVE-2023-34968.html
    o BUG 15418: Secure channel faulty since Windows 10/11 update 07/2023.
      https://bugzilla.samba.org/show_bug.cgi?id=15418
      (this has been patched in the previous upload; Closes: #1041043)
Checksums-Sha1:
 ee66ccf12bc249ca6a868b9e505deefadf4f476f 4415 samba_4.18.5+dfsg-1.dsc
 ef2fa1002634cd313be83dec98d0e9e9fc378261 24393552 samba_4.18.5+dfsg.orig.tar.xz
 e23e9b440573a5b7fdcc2714de240dc0f781ed88 272716 
samba_4.18.5+dfsg-1.debian.tar.xz
 3f3aa2d0d096154947d90eeb2eb711e6e47b61a5 6348 
samba_4.18.5+dfsg-1_source.buildinfo
Checksums-Sha256:
 43c0755ab310e398908785347c059699bd1e826a2cb03a2cc29850f8e7f643b9 4415 
samba_4.18.5+dfsg-1.dsc
 c235c0ed7e8580c7e6fcf503acbd55122ad8e262ef2deacc34870c830fcb646a 24393552 
samba_4.18.5+dfsg.orig.tar.xz
 46c7ff524037394f44daae5671b44ec704ab01fe3c83cd7a67a098b7909b9fd9 272716 
samba_4.18.5+dfsg-1.debian.tar.xz
 b7da409f85a79248d5c23faefa0679255b02fadefa2dd9dffd3b3e7706388fb8 6348 
samba_4.18.5+dfsg-1_source.buildinfo
Files:
 5ef5065031d75bfeffb9bfa29cd5af14 4415 net optional samba_4.18.5+dfsg-1.dsc
 4f0022d44fcf54e90c90b7528be76d88 24393552 net optional 
samba_4.18.5+dfsg.orig.tar.xz
 ec742285f3bef278651dc748bb01c7c2 272716 net optional 
samba_4.18.5+dfsg-1.debian.tar.xz
 f4d22994bfeba24da43fb10488ca410d 6348 net optional 
samba_4.18.5+dfsg-1_source.buildinfo
Accepted samba 2:4.18.5+dfsg-1 (source) into unstable

Reply via email to
