[SCM] Samba Website Repository - branch master updated

2020-03-31 Thread Andrew Bartlett
The branch, master has been updated
   via  a955fae Add another cross-link to the security releases and process
  from  f9562f7 Add Samba 4.10.14 to the list.

https://git.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit a955faedc567f2cb9ec4de4649990557f46d23c3
Author: Andrew Bartlett 
Date:   Wed Apr 1 11:25:02 2020 +1300

Add another cross-link to the security releases and process

Signed-off-by: Andrew Bartlett 

---

Summary of changes:
 history/index.html | 8 
 1 file changed, 8 insertions(+)


Changeset truncated at 500 lines:

diff --git a/history/index.html b/history/index.html
index ae4993d..b23da8d 100755
--- a/history/index.html
+++ b/history/index.html
@@ -7,6 +7,14 @@
 Only the last ten release announcements can be found below.  With every new 
release, the oldest announcement drops off the page.  This should allow for a 
quick glance at recent Samba activity.  For a more in-depth tour of Samba's 
release history, notes for all stable releases are archived in the list to the 
left.
 
 
+Security Release Announcements
+
+As well as being included in the recent releases listed below, we
+maintain a seperate list of
+Samba Security releases resulting from the
+https://wiki.samba.org/index.php/Samba_Security_Process;>
+Samba Security release process.
+
 Previous Release Announcements
 
 


-- 
Samba Website Repository



[SCM] Samba Shared Repository - branch master updated

2020-03-31 Thread Jeremy Allison
The branch, master has been updated
   via  9edd7268b6d smbd: remove struct privilege_paths
  from  89041a6d18a lib ldb: lmdb clear stale readers on write txn start

https://git.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 9edd7268b6da23ade527d02dde5820782f51a237
Author: Ralph Boehme 
Date:   Mon Mar 30 08:06:10 2020 +0200

smbd: remove struct privilege_paths

The last user of this had been removed by
d485c43cc74c5550d151fe728ddc53b02ab23df8.

Signed-off-by: Ralph Boehme 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Tue Mar 31 19:32:12 UTC 2020 on sn-devel-184

---

Summary of changes:
 source3/include/vfs.h  |  7 ---
 source3/smbd/process.c |  1 -
 source3/smbd/smbd.h|  9 -
 source3/smbd/vfs.c | 42 --
 4 files changed, 16 insertions(+), 43 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/include/vfs.h b/source3/include/vfs.h
index eae9f97179f..fe315673823 100644
--- a/source3/include/vfs.h
+++ b/source3/include/vfs.h
@@ -543,7 +543,6 @@ typedef struct connection_struct {
 } connection_struct;
 
 struct smbd_smb2_request;
-struct privilege_paths;
 struct referral;
 
 struct smb_request {
@@ -600,12 +599,6 @@ struct smb_request {
 */
struct smbd_smb2_request *smb2req;
 
-   /*
-* Pathnames used if request done
-* under privilege.
-*/
-   struct privilege_paths *priv_paths;
-
/*
 * Request list for chained requests, we're part of it.
 */
diff --git a/source3/smbd/process.c b/source3/smbd/process.c
index 8ffe3555637..955f13938b4 100644
--- a/source3/smbd/process.c
+++ b/source3/smbd/process.c
@@ -632,7 +632,6 @@ static bool init_smb_request(struct smb_request *req,
}
req->chain_fsp = NULL;
req->smb2req = NULL;
-   req->priv_paths = NULL;
req->chain = NULL;
req->posix_pathnames = lp_posix_pathnames();
smb_init_perfcount_data(>pcd);
diff --git a/source3/smbd/smbd.h b/source3/smbd/smbd.h
index 4c13239c793..787582850db 100644
--- a/source3/smbd/smbd.h
+++ b/source3/smbd/smbd.h
@@ -26,15 +26,6 @@ struct dptr_struct;
 #include "smbd/proto.h"
 #include "locking/proto.h"
 
-/*
- * Pathnames used if request done
- * under privilege.
- */
-struct privilege_paths {
-   struct smb_filename parent_name;
-   struct smb_filename file_name;
-};
-
 struct trans_state {
struct trans_state *next, *prev;
uint64_t vuid; /* SMB2 compat */
diff --git a/source3/smbd/vfs.c b/source3/smbd/vfs.c
index 9e0d14cd57a..f99c12f0451 100644
--- a/source3/smbd/vfs.c
+++ b/source3/smbd/vfs.c
@@ -1025,36 +1025,29 @@ NTSTATUS 
check_reduced_name_with_privilege(connection_struct *conn,
struct smb_filename *resolved_fname = NULL;
struct smb_filename *saved_dir_fname = NULL;
struct smb_filename *smb_fname_cwd = NULL;
-   struct privilege_paths *priv_paths = NULL;
int ret;
+   struct smb_filename parent_name = { 0 };
+   struct smb_filename file_name = { 0 };
 
DEBUG(3,("check_reduced_name_with_privilege [%s] [%s]\n",
smb_fname->base_name,
conn->connectpath));
 
 
-   priv_paths = talloc_zero(smbreq, struct privilege_paths);
-   if (!priv_paths) {
-   status = NT_STATUS_NO_MEMORY;
-   goto err;
-   }
-
if (!parent_dirname(ctx, smb_fname->base_name,
_name, _component)) {
status = NT_STATUS_NO_MEMORY;
goto err;
}
 
-   priv_paths->parent_name.base_name = talloc_strdup(priv_paths, dir_name);
-   priv_paths->file_name.base_name = talloc_strdup(priv_paths, 
last_component);
-
-   if (priv_paths->parent_name.base_name == NULL ||
-   priv_paths->file_name.base_name == NULL) {
+   parent_name.base_name = dir_name;
+   file_name.base_name = talloc_strdup(ctx, last_component);
+   if (file_name.base_name == NULL) {
status = NT_STATUS_NO_MEMORY;
goto err;
}
 
-   if (SMB_VFS_STAT(conn, _paths->parent_name) != 0) {
+   if (SMB_VFS_STAT(conn, _name) != 0) {
status = map_nt_error_from_unix(errno);
goto err;
}
@@ -1065,7 +1058,7 @@ NTSTATUS 
check_reduced_name_with_privilege(connection_struct *conn,
goto err;
}
 
-   if (vfs_ChDir(conn, _paths->parent_name) == -1) {
+   if (vfs_ChDir(conn, _name) == -1) {
status = map_nt_error_from_unix(errno);
goto err;
}
@@ -1092,7 +1085,7 @@ NTSTATUS 
check_reduced_name_with_privilege(connection_struct *conn,
}
 

[SCM] Samba Shared Repository - branch v4-11-test updated

2020-03-31 Thread Karolin Seeger
The branch, v4-11-test has been updated
   via  16d837cb233 nsswitch: fix use-after-free causing segfault in 
_pam_delete_cred
  from  8159513ac73 ctdb-recoverd: Avoid dereferencing NULL rec->nodemap

https://git.samba.org/?p=samba.git;a=shortlog;h=v4-11-test


- Log -
commit 16d837cb233fca641943d0194a3e0cb379275ec4
Author: Günther Deschner 
Date:   Fri Mar 27 10:13:11 2020 +0100

nsswitch: fix use-after-free causing segfault in _pam_delete_cred

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14327

Guenther

Signed-off-by: Guenther Deschner 
Reviewed-by: Alexander Bokovoy 

Autobuild-User(master): Günther Deschner 
Autobuild-Date(master): Mon Mar 30 13:01:20 UTC 2020 on sn-devel-184

(cherry picked from commit 047b0d8ab534c7a10a8572fd9f21e2456fd30710)

Autobuild-User(v4-11-test): Karolin Seeger 
Autobuild-Date(v4-11-test): Tue Mar 31 16:14:54 UTC 2020 on sn-devel-184

---

Summary of changes:
 nsswitch/pam_winbind.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


Changeset truncated at 500 lines:

diff --git a/nsswitch/pam_winbind.c b/nsswitch/pam_winbind.c
index 3ad70d3c4cd..7af03fe2bd0 100644
--- a/nsswitch/pam_winbind.c
+++ b/nsswitch/pam_winbind.c
@@ -2609,7 +2609,6 @@ static int _pam_delete_cred(pam_handle_t *pamh, int flags,
wbc_status = wbcCtxLogoffUserEx(ctx->wbc_ctx, , );
retval = wbc_auth_error_to_pam_error(ctx, error, wbc_status,
 user, "wbcLogoffUser");
-   wbcFreeMemory(error);
wbcFreeMemory(logoff.blobs);
logoff.blobs = NULL;
 
@@ -2629,6 +2628,7 @@ out:
retval = wbc_auth_error_to_pam_error(ctx, error, wbc_status,
 user, "wbcLogoffUser");
}
+   wbcFreeMemory(error);
 
/*
 * Delete the krb5 ccname variable from the PAM environment


-- 
Samba Shared Repository