summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* VERSION: Disable GIT_SNAPSHOT for the 4.17.7 release.samba-4.17.7Jule Anger2023-03-291-1/+1
* WHATSNEW: Add release notes for Samba 4.17.7.Jule Anger2023-03-291-2/+72
* CVE-2023-0922 set default ldap client sasl wrapping to sealRob van der Linde2023-03-204-17/+16
* CVE-2023-0225 s4-acl: Don't return early if dNSHostName element has no valuesJoseph Sutton2023-03-202-7/+7
* CVE-2023-0225 pytest/acl: test deleting dNSHostName as unprivileged userDouglas Bagnall2023-03-203-0/+239
* CVE-2023-0225 CVE-2020-25720 pydsdb: Add dsHeuristics constant definitionsJoseph Sutton2023-03-201-0/+30
* CVE-2023-0225 CVE-2020-25720 s4/dsdb/util: Add functions for dsHeuristics 28, 29Joseph Sutton2023-03-202-0/+42
* CVE-2023-0614 ldb: Release LDB 2.6.2ldb-2.6.2Andrew Bartlett2023-03-203-1/+305
* CVE-2023-0614 lib/ldb-samba Ensure ACLs are evaluated on SAMBA_LDAP_MATCH_RUL...Andrew Bartlett2023-03-201-1/+6
* CVE-2023-0614 lib/ldb-samba: Add test for SAMBA_LDAP_MATCH_RULE_TRANSITIVE_EV...Andrew Bartlett2023-03-203-57/+175
* CVE-2023-0614 dsdb: Add pre-cleanup and self.addCleanup() of OU created in ma...Andrew Bartlett2023-03-201-0/+8
* CVE-2023-0614 dsdb: Add DSDB_MARK_REQ_UNTRUSTEDAndrew Bartlett2023-03-202-0/+5
* CVE-2023-0614 s4-dsdb: Treat confidential attributes as unindexedJoseph Sutton2023-03-204-4/+33
* CVE-2023-0614 ldb: Filter on search base before redacting messageJoseph Sutton2023-03-204-23/+47
* CVE-2023-0614 ldb: Centralise checking for inaccessible matchesJoseph Sutton2023-03-202-30/+31
* CVE-2023-0614 ldb: Use binary search to check whether attribute is secretJoseph Sutton2023-03-201-21/+35
* CVE-2023-0614 s4-acl: Avoid calling dsdb_module_am_system() if we can help itJoseph Sutton2023-03-201-3/+8
* CVE-2023-0614 ldb: Prevent disclosure of confidential attributesJoseph Sutton2023-03-2012-455/+672
* CVE-2023-0614 s4-acl: Split out function to set up access checking variablesJoseph Sutton2023-03-201-33/+80
* CVE-2023-0614 s4-dsdb: Add samdb_result_dom_sid_buf()Joseph Sutton2023-03-201-0/+20
* CVE-2023-0614 s4-acl: Split out logic to remove access checking attributesJoseph Sutton2023-03-201-23/+35
* CVE-2023-0614 ldb: Add ldb_parse_tree_get_attr()Joseph Sutton2023-03-202-0/+28
* CVE-2023-0614 tests/krb5: Add test for confidential attributes timing differe...Joseph Sutton2023-03-202-0/+163
* CVE-2023-0614 schema_samba4.ldif: Allocate previously added OIDJoseph Sutton2023-03-201-0/+1
* schema_samba4.ldif: Allocate previously added OIDsJoseph Sutton2023-03-201-0/+2
* CVE-2023-0614 s4:dsdb:tests: Fix <GUID={}> search in confidential attributes ...Joseph Sutton2023-03-201-3/+3
* CVE-2023-0614 s4:dsdb/extended_dn_in: Don't modify a search tree we don't ownJoseph Sutton2023-03-201-8/+32
* CVE-2023-0614 ldb: Make use of ldb_filter_attrs_in_place()Joseph Sutton2023-03-204-65/+66
* CVE-2023-0614 ldb: Make ldb_filter_attrs_in_place() work in placeJoseph Sutton2023-03-203-442/+307
* CVE-2023-0614 ldb: Add function to filter message in placeJoseph Sutton2023-03-204-0/+1148
* CVE-2023-0614 ldb: Add function to add distinguishedName to messageJoseph Sutton2023-03-202-3/+8
* CVE-2023-0614 ldb: Add function to remove excess capacity from an ldb messageJoseph Sutton2023-03-202-0/+19
* CVE-2023-0614 ldb: Add function to take ownership of an ldb messageJoseph Sutton2023-03-202-0/+45
* CVE-2023-0614 ldb:tests: Ensure all tests are accounted forJoseph Sutton2023-03-201-2/+3
* CVE-2023-0614 ldb:tests: Ensure ldb_val data is zero-terminatedJoseph Sutton2023-03-201-85/+86
* CVE-2023-0614 s4-acl: Use ldb functions for handling inaccessible message ele...Joseph Sutton2023-03-201-52/+10
* CVE-2023-0614 ldb: Add functions for handling inaccessible message elementsJoseph Sutton2023-03-202-0/+30
* CVE-2023-0614 s4-acl: Make some parameters constJoseph Sutton2023-03-201-2/+2
* CVE-2023-0614 s4:dsdb: Use talloc_get_type_abort() more consistentlyJoseph Sutton2023-03-204-5/+5
* CVE-2023-0614 libcli/security: Make some parameters constJoseph Sutton2023-03-202-6/+6
* CVE-2023-0614 dsdb: Alter timeout test in large_ldap.py to be slower by match...Andrew Bartlett2023-03-201-2/+16
* CVE-2023-0614 selftest: Use setUpClass() to reduce "make test TESTS=large_lda...Andrew Bartlett2023-03-201-33/+36
* CVE-2023-0614 lib/ldb: Avoid allocation and memcpy() for every wildcard match...Andrew Bartlett2023-03-201-10/+50
* VERSION: Bump version up to Samba 4.17.7...Jule Anger2023-03-091-2/+2
* VERSION: Disable GIT_SNAPSHOT for the 4.17.6 release.samba-4.17.6Jule Anger2023-03-091-1/+1
* WHATSNEW: Add release notes for Samba 4.17.6.Jule Anger2023-03-091-2/+63
* s3: smbd: Fix fsp/fd leak when looking up a non-existent stream name on a file.Jeremy Allison2023-03-082-1/+21
* s3: tests: Add new test_stream_dir_rename.sh test.Jeremy Allison2023-03-083-0/+77
* s3: provision: Add new streams_xattr_nostrict share - needs "strict rename = ...Jeremy Allison2023-03-081-0/+5
* rpcd: With npa->need_idle_server we can have more than 256 serversVolker Lendecke2023-03-072-2/+2