From 52be26e90c08caf78617deb4f1af6746af0f5b95 Mon Sep 17 00:00:00 2001 From: Gustavo Zacarias Date: Tue, 8 Mar 2016 18:31:20 -0300 Subject: [PATCH] samba4: security bump to version 4.3.6 Fixes: CVE-2015-7560 - Authenticated client could cause Samba to overwrite ACLs with incorrect owner/group. CVE-2016-0771 - Malicious request can cause the Samba internal DNS server to crash or unintentionally return uninitialized memory. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard --- package/samba4/samba4.hash | 2 +- package/samba4/samba4.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/samba4/samba4.hash b/package/samba4/samba4.hash index 1b536577da..d8458e6cd4 100644 --- a/package/samba4/samba4.hash +++ b/package/samba4/samba4.hash @@ -1,2 +1,2 @@ # Locally calculated after checking pgp signature -sha256 583f927a823b272757fd4df0be267bd20a223b06cfc3c662df17e4870f14bf1c samba-4.3.5.tar.gz +sha256 3251eca5b196854e79978f4a92d5fd2b55bd7b0a252a65131a9be02be6754924 samba-4.3.6.tar.gz diff --git a/package/samba4/samba4.mk b/package/samba4/samba4.mk index 715983e6e1..ee0452e6c2 100644 --- a/package/samba4/samba4.mk +++ b/package/samba4/samba4.mk @@ -4,7 +4,7 @@ # ################################################################################ -SAMBA4_VERSION = 4.3.5 +SAMBA4_VERSION = 4.3.6 SAMBA4_SITE = http://ftp.samba.org/pub/samba/stable SAMBA4_SOURCE = samba-$(SAMBA4_VERSION).tar.gz SAMBA4_INSTALL_STAGING = YES -- 2.30.2