samba4: security bump to version 4.7.6
authorBaruch Siach <baruch@tkos.co.il>
Tue, 13 Mar 2018 17:30:59 +0000 (19:30 +0200)
committerPeter Korsgaard <peter@korsgaard.com>
Tue, 13 Mar 2018 21:15:17 +0000 (22:15 +0100)
commit40275643432c974dca8d4b6ba1886bba19fe6317
tree40a47e5f327c982a1fc18f1613045158ad43fa21
parent6b68c83282bc6abe6781b7c79f7d8f228f12978e
samba4: security bump to version 4.7.6

CVE-2018-1050: Vulnerability to a denial of service attack when the RPC
spoolss service is configured to be run as an external daemon.

https://www.samba.org/samba/security/CVE-2018-1050.html

CVE-2018-1057: Authenticated users might change any other users'
passwords, including administrative users and privileged service
accounts (eg Domain Controllers).

https://www.samba.org/samba/security/CVE-2018-1057.html

Add clnt_create() test result to cache to fix cross configure breakage.

Cc: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/samba4/samba4-cache.txt
package/samba4/samba4.hash
package/samba4/samba4.mk