summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJule Anger <janger@samba.org>2022-01-31 10:34:04 +0100
committerJule Anger <janger@samba.org>2022-01-31 12:24:56 +0100
commit81aab85bae818572236c7fcaf91ec4539974108e (patch)
tree51ca6ba3732946d80c79b176ab0392644049335a
parente7d0d40e684702d7fcbb781e0f6c072be86a1386 (diff)
downloadsamba-81aab85bae818572236c7fcaf91ec4539974108e.tar.gz
WHATSNEW: Add release notes for Samba 4.15.5.
Signed-off-by: Jule Anger <janger@samba.org>
-rw-r--r--WHATSNEW.txt58
1 files changed, 56 insertions, 2 deletions
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 9cb58de2a61..292c34457df 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,4 +1,59 @@
==============================
+ Release Notes for Samba 4.15.5
+ January 31, 2022
+ ==============================
+
+
+This is a security release in order to address the following defects:
+
+o CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target
+ of a symlink exists.
+ https://www.samba.org/samba/security/CVE-2021-44141.html
+
+o CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module.
+ https://www.samba.org/samba/security/CVE-2021-44142.html
+
+o CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks.
+ https://www.samba.org/samba/security/CVE-2022-0336.html
+
+
+Changes since 4.15.4
+--------------------
+
+o Jeremy Allison <jra@samba.org>
+ * BUG 14911: CVE-2021-44141
+
+o Ralph Boehme <slow@samba.org>
+ * BUG 14914: CVE-2021-44142
+
+o Joseph Sutton <josephsutton@catalyst.net.nz>
+ * BUG 14950: CVE-2022-0336
+
+
+#######################################
+Reporting bugs & Development Discussion
+#######################################
+
+Please discuss this release on the samba-technical mailing list or by
+joining the #samba-technical IRC channel on irc.libera.chat or the
+#samba-technical:matrix.org matrix channel.
+
+If you do report problems then please try to send high quality
+feedback. If you don't provide vital information to help us track down
+the problem then you will probably be ignored. All bug reports should
+be filed under the Samba 4.1 and newer product in the project's Bugzilla
+database (https://bugzilla.samba.org/).
+
+
+======================================================================
+== Our Code, Our Bugs, Our Responsibility.
+== The Samba Team
+======================================================================
+
+
+Release notes for older releases follow:
+----------------------------------------
+ ==============================
Release Notes for Samba 4.15.4
January 19, 2022
==============================
@@ -61,8 +116,7 @@ database (https://bugzilla.samba.org/).
======================================================================
-Release notes for older releases follow:
-----------------------------------------
+----------------------------------------------------------------------
==============================
Release Notes for Samba 4.15.3
December 08, 2021